last executing test programs: 4.175584308s ago: executing program 2 (id=6167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000006000000050000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001c696914343b2ba18bcbb23a4ee4a0fb3a23615e5f5eae267363226f4e92143c591e898a09dc8bd20e2dfdc73505f90d12f17d3cf3885c2f45df9b041568749c14e6ff5edf32699ebe7e85d5dfe0a17722dbd449f3511edfc35e085e528319ff20ac3e8d6132e02ff66feadf22222cd2db3ab579258ccb378d34cd6b8958cd6dde6c6897fe46e2f9871fe13372cfe1abf5d5840ca8a60af92a1a2eeedd5a375f63767873ff87906c0a98af1888a660d94268b9b6c78c623857180d216e31084d846ff7597d67e39670756cc6396f6cbf0ed1f1aea6890a6a3ad7efddd8f6e7e97668efb8aa", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x80, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 3.809270353s ago: executing program 2 (id=6176): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0xad8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x100) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cc", 0x1}], 0x1}, 0x4000804) 2.622687621s ago: executing program 2 (id=6180): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_bp={0x0}, 0x4008, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r1 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_subtree(r1, 0x0, 0x1e) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x7, 0x0, 0x63) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x800000}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.463507913s ago: executing program 1 (id=6183): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x280901, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40012062) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.450713023s ago: executing program 3 (id=6184): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffe74, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c11", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 2.234555587s ago: executing program 0 (id=6185): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x4, 0x2}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x43) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000"], 0x0, 0x52}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(0x0, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2f, &(0x7f0000000080), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2.234274447s ago: executing program 2 (id=6186): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fc, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40080c0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.234051827s ago: executing program 3 (id=6188): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x2, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a", 0x43}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.233786697s ago: executing program 4 (id=6189): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0xad8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x80}, 0x100) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cc", 0x1}], 0x1}, 0x4000804) 2.082971729s ago: executing program 3 (id=6190): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.050093329s ago: executing program 1 (id=6191): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000000400), 0x8, 0x23, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7f}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.038185979s ago: executing program 0 (id=6192): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0xad8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x80}, 0x100) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cc", 0x1}], 0x1}, 0x4000804) 1.114204953s ago: executing program 0 (id=6193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000006000000050000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001c696914343b2ba18bcbb23a4ee4a0fb3a23615e5f5eae267363226f4e92143c591e898a09dc8bd20e2dfdc73505f90d12f17d3cf3885c2f45df9b041568749c14e6ff5edf32699ebe7e85d5dfe0a17722dbd449f3511edfc35e085e528319ff20ac3e8d6132e02ff66feadf22222cd2db3ab579258ccb378d34cd6b8958cd6dde6c6897fe46e2f9871fe13372cfe1abf5d5840ca8a60af92a1a2eeedd5a375f63767873ff87906c0a98af1888a660d94268b9b6c78c623857180d216e31084d846ff7597d67e39670756cc6396f6cbf0ed1f1aea6890a6a3ad7efddd8f6e7e97668efb8aa", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x80, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 1.113911213s ago: executing program 1 (id=6194): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0x1, &(0x7f0000000440)="3a6107ce05dc35c982bb75d4635674d3ff033048eb0194337b1693f770806ca7f9a6831ea80c501011c0850332bfabfb1b26f27b5f26bd91da76523cd1088335efe5a6d426dc2d159c300517071d5b7d2dfc2c356238eea3c6a89e21ae587c02a5ae427f7dad3b0113d70403e0705f590fcaf38f352bff31679396efcd672f8596998aa92606d907fed83b90f2a6418fd9ac99988a3123eccb9305a7b76d8c1647"}, 0x20) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9c, 0xb}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffb}, 0x38) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc851, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x8, 0x7f}, 0x4000, 0x0, 0xea0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xc, 0xffffffffffffffff, 0x1) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 1.113654613s ago: executing program 2 (id=6195): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000016000000b40000007f"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_pid(r2, &(0x7f0000000980), 0x20000992) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000a800000000009500"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.113363183s ago: executing program 3 (id=6196): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffe74, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c11", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.113106243s ago: executing program 4 (id=6197): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0x2a, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x122) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 789.194198ms ago: executing program 4 (id=6198): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_bp={0x0}, 0x4008, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r1 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_subtree(r1, 0x0, 0x1e) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x7, 0x0, 0x63) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x800000}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 712.856419ms ago: executing program 3 (id=6199): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x1ff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d7, 0x4, @perf_bp={0x0}, 0x6448, 0xd8, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000400000004000000010000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 636.11106ms ago: executing program 0 (id=6200): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x400, 0x20000, 0x0, 0x9, 0x0, 0x2, 0x280, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 632.09502ms ago: executing program 4 (id=6201): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') ioctl$TUNSETFILTEREBPF(r0, 0xb701, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x1d, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x8001, 0x8}, 0xc) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x11, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000380)=""/254, 0x26, 0xfe, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0xffffffff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000240)={'bond0', 0x32, 0x30}, 0x8) 559.771161ms ago: executing program 1 (id=6202): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x2, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84", 0x44}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 558.556031ms ago: executing program 2 (id=6203): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0xad8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x80}, 0x100) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cc", 0x1}], 0x1}, 0x4000804) 383.318164ms ago: executing program 3 (id=6204): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0xad8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x80}, 0x100) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="cc", 0x1}], 0x1}, 0x4000804) 363.993794ms ago: executing program 0 (id=6205): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfc, 0xfd, 0x0, 0x0, 0x1001, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x2, 0xffffffffffffff81, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2020) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 345.120505ms ago: executing program 1 (id=6206): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000003f696cd0000000000008000b700001000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1fd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000fe030000000400000008000000000000002c81cd6503b0ea00d87f747000677bece41e7793b3b191b670bbc928e490e083093395653dcea7add820a56de57c3e4e4affbb0500ca701f9aad078e40365bff991409d4c4444d09698252b5aedc33a6c4b99af1dc61c51f5851d8eeee5b29fb6a9df848045082a854407750d9a1ea0cc74f20791324c21299fea4a00bd4", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x3abe, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000580), 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0xc, 0xb1, 0x1, 0x1, 0x0, 0x1, 0x2, 0xab2cd1a375d1bc89, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1749, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x200, 0xfffffffffffffff7, 0x1, 0x8, 0x9, 0x4, 0x5, 0x0, 0x5}, r3, 0x2, 0xffffffffffffffff, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="efdfb837a5") socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) 344.465625ms ago: executing program 4 (id=6207): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="79360b92d73f0d8eeeea59485483", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x27, 0xffffff83, 0xfffffffffffffd6b, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x6132}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe3a) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 70.434928ms ago: executing program 4 (id=6208): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 352.3µs ago: executing program 0 (id=6209): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000000400), 0x8, 0x23, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7f}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=6210): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) kernel console output (not intermixed with test programs): la: 2 callbacks suppressed [ 433.624759][T10884] netlink: 'syz.2.2427': attribute type 29 has an invalid length. [ 433.767297][T10884] netlink: 'syz.2.2427': attribute type 29 has an invalid length. [ 434.486537][T10897] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2431'. [ 434.632566][T10901] netlink: 'syz.0.2430': attribute type 10 has an invalid length. [ 434.663740][T10901] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 434.762888][T10897] netlink: 'syz.4.2431': attribute type 29 has an invalid length. [ 434.862533][T10897] netlink: 'syz.4.2431': attribute type 29 has an invalid length. [ 437.728800][T10939] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2456'. [ 438.854176][T10965] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2466'. [ 438.979372][T10970] netlink: 'syz.1.2457': attribute type 10 has an invalid length. [ 439.005969][T10970] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 439.511922][T10981] netlink: 'syz.0.2473': attribute type 10 has an invalid length. [ 439.529283][T10981] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 439.546546][T10983] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2474'. [ 439.775892][T10983] netlink: 'syz.2.2474': attribute type 29 has an invalid length. [ 439.787280][T10983] netlink: 'syz.2.2474': attribute type 29 has an invalid length. [ 439.845798][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.852134][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.839730][T11017] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2479'. [ 441.296392][T11017] netlink: 'syz.2.2479': attribute type 29 has an invalid length. [ 441.667098][T11017] netlink: 'syz.2.2479': attribute type 29 has an invalid length. [ 445.750392][ T5419] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 446.953690][T11056] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2494'. [ 447.192361][T11056] netlink: 'syz.2.2494': attribute type 29 has an invalid length. [ 447.221682][T11056] netlink: 'syz.2.2494': attribute type 29 has an invalid length. [ 448.880626][T11064] netlink: 'syz.4.2497': attribute type 10 has an invalid length. [ 448.903896][T11064] bridge0: port 4(macsec0) entered blocking state [ 448.910516][T11064] bridge0: port 4(macsec0) entered disabled state [ 449.863651][T11090] device wlan0 entered promiscuous mode [ 453.094609][T11136] device wlan0 entered promiscuous mode [ 453.841121][T11152] netlink: 'syz.3.2528': attribute type 10 has an invalid length. [ 453.899120][T11152] bridge0: port 4(macsec0) entered blocking state [ 453.925317][T11152] bridge0: port 4(macsec0) entered disabled state [ 455.884301][ T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 456.533117][T11182] device wlan0 entered promiscuous mode [ 458.431522][T11216] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 461.112145][T11242] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2565'. [ 461.426911][T11242] netlink: 'syz.3.2565': attribute type 29 has an invalid length. [ 461.467344][T11242] netlink: 'syz.3.2565': attribute type 29 has an invalid length. [ 461.728357][T11261] device wlan0 entered promiscuous mode [ 464.669802][T11296] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2584'. [ 464.944908][T11296] netlink: 'syz.2.2584': attribute type 29 has an invalid length. [ 464.956517][T11296] netlink: 'syz.2.2584': attribute type 29 has an invalid length. [ 465.313746][T11308] device wlan0 entered promiscuous mode [ 467.817513][T11326] device wlan0 left promiscuous mode [ 467.832123][T11330] device wlan0 entered promiscuous mode [ 468.169868][T11354] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2601'. [ 468.495228][T11354] netlink: 'syz.0.2601': attribute type 29 has an invalid length. [ 468.516105][T11354] netlink: 'syz.0.2601': attribute type 29 has an invalid length. [ 469.201170][T11375] device syzkaller0 entered promiscuous mode [ 472.240877][T11421] netlink: 'syz.0.2634': attribute type 10 has an invalid length. [ 474.361607][T11467] netlink: 'syz.2.2645': attribute type 10 has an invalid length. [ 474.567844][T11468] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 475.530938][T11484] netlink: 'syz.4.2653': attribute type 11 has an invalid length. [ 475.574483][T11484] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2653'. [ 475.634211][T11483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.088956][T11490] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 478.922272][T11541] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 481.523284][T11586] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 483.028141][T11602] netlink: 'syz.0.2693': attribute type 11 has an invalid length. [ 483.072971][T11602] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2693'. [ 483.136591][T11601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.202707][T11599] device syzkaller0 entered promiscuous mode [ 483.503113][ T4271] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 483.503568][ T4271] Bluetooth: hci1: hardware error 0x00 [ 485.359657][T11612] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.603469][ T4271] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 486.675531][T11653] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 487.005002][T11656] device syzkaller0 entered promiscuous mode [ 487.203728][ T5419] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 489.767133][T11674] netlink: 'syz.0.2744': attribute type 3 has an invalid length. [ 489.788781][T11674] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2744'. [ 490.263791][ T4271] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 491.042951][T11712] device syzkaller0 entered promiscuous mode [ 491.385373][T11727] netlink: 'syz.1.2755': attribute type 3 has an invalid length. [ 491.411426][T11727] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2755'. [ 491.688583][ T4358] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 494.324718][ T4271] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 494.333268][ T4271] Bluetooth: hci0: Injecting HCI hardware error event [ 494.341469][ T4280] Bluetooth: hci0: hardware error 0x00 [ 494.438292][T11766] netlink: 'syz.2.2771': attribute type 3 has an invalid length. [ 494.481904][T11766] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2771'. [ 494.878154][T11782] netlink: 'syz.3.2777': attribute type 4 has an invalid length. [ 494.906509][T11782] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2777'. [ 494.971585][T11780] device syzkaller0 entered promiscuous mode [ 496.416094][ T4280] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 496.693057][ T4280] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 496.792421][T11812] netlink: 'syz.4.2787': attribute type 3 has an invalid length. [ 496.808069][T11812] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2787'. [ 498.719515][T11844] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2799'. [ 499.542158][T11865] delete_channel: no stack [ 499.616604][T11865] delete_channel: no stack [ 499.637300][T11869] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.2807'. [ 499.644379][T11866] netlink: 'syz.3.2805': attribute type 3 has an invalid length. [ 499.669078][T11869] openvswitch: netlink: Message has 48126 unknown bytes. [ 499.674120][T11866] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2805'. [ 499.731586][T11870] device syzkaller0 entered promiscuous mode [ 501.285523][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.292018][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.513127][T11874] netlink: 'syz.3.2821': attribute type 10 has an invalid length. [ 501.641484][T11874] device macvlan0 entered promiscuous mode [ 501.666597][T11874] team0: Port device macvlan0 added [ 503.071202][T11921] netlink: 'syz.1.2827': attribute type 10 has an invalid length. [ 503.121726][T11921] device bridge_slave_1 left promiscuous mode [ 503.138547][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.169025][T11921] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 503.215546][T11923] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2827'. [ 503.698791][T11923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.723037][T11923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.749584][T11923] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 503.770702][T11923] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 503.792755][T11923] bond0 (unregistering): Released all slaves [ 507.145814][T11989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2845'. [ 510.048682][T12037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2860'. [ 511.776560][T12059] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2866'. [ 511.850085][T12059] device bond_slave_0 entered promiscuous mode [ 511.856708][T12059] device bond_slave_1 entered promiscuous mode [ 512.064224][T12061] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2868'. [ 513.501862][T12090] netlink: 'syz.0.2879': attribute type 10 has an invalid length. [ 513.563082][T12090] device bridge_slave_1 left promiscuous mode [ 513.580745][T12090] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.629310][T12090] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 513.660057][T12092] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2879'. [ 514.420068][T12092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.472972][T12092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.523969][T12092] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 514.588208][T12092] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 514.623840][T12092] bond0 (unregistering): Released all slaves [ 515.617150][T12126] netlink: 'syz.4.2891': attribute type 10 has an invalid length. [ 515.862193][T12126] device macvlan0 entered promiscuous mode [ 516.028675][T12126] team0: Port device macvlan0 added [ 516.863283][T12144] netlink: 'syz.2.2899': attribute type 10 has an invalid length. [ 516.949045][T12144] device bridge_slave_1 left promiscuous mode [ 516.964767][T12144] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.006726][T12144] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 517.060921][T12153] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2899'. [ 517.099804][ T3639] udevd[3639]: worker [4260] terminated by signal 33 (Unknown signal 33) [ 517.120390][ T3639] udevd[3639]: worker [4260] failed while handling '/devices/virtual/block/loop3' [ 517.392403][T12153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.426151][T12153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.467651][T12153] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 517.501718][T12153] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 517.527422][T12153] bond0 (unregistering): Released all slaves [ 518.270143][T12180] netlink: 'syz.2.2908': attribute type 10 has an invalid length. [ 518.401240][T12180] device macvlan0 entered promiscuous mode [ 518.422165][T12180] team0: Port device macvlan0 added [ 519.642690][T12211] netlink: 766 bytes leftover after parsing attributes in process `syz.4.2917'. [ 519.702509][T12211] device bond_slave_0 entered promiscuous mode [ 519.708882][T12211] device bond_slave_1 entered promiscuous mode [ 519.907760][T12218] netlink: 'syz.3.2921': attribute type 10 has an invalid length. [ 519.930797][T12218] bridge0: port 4(macsec0) entered blocking state [ 519.937677][T12218] bridge0: port 4(macsec0) entered forwarding state [ 519.946373][T12218] bridge0: port 3(team0) entered blocking state [ 519.954230][T12218] bridge0: port 3(team0) entered forwarding state [ 519.961451][T12218] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.969318][T12218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.977819][T12218] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.985672][T12218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.032893][T12218] device bridge0 entered promiscuous mode [ 520.059769][T12218] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 520.092807][T12224] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2922'. [ 521.734814][T12259] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2933'. [ 523.000759][T12277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2939'. [ 523.044709][ T5394] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 523.690570][T12285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2955'. [ 524.066736][T12293] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2947'. [ 524.262702][T12297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2961'. [ 524.383971][T12303] netlink: 'syz.3.2952': attribute type 39 has an invalid length. [ 526.182058][T12354] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2965'. [ 526.300421][T12357] netlink: 'syz.0.2968': attribute type 10 has an invalid length. [ 526.598266][T12357] team0: Port device macvlan0 added [ 528.442541][T12396] netlink: 'syz.1.2988': attribute type 10 has an invalid length. [ 528.668890][T12402] netlink: 'syz.1.2989': attribute type 10 has an invalid length. [ 528.733008][T12402] device macvlan0 entered promiscuous mode [ 528.764005][T12402] team0: Port device macvlan0 added [ 529.360397][T12424] netlink: 'syz.1.3007': attribute type 10 has an invalid length. [ 530.289367][T12431] netlink: 'syz.4.3001': attribute type 10 has an invalid length. [ 530.336207][T12431] bridge0: port 4(macsec0) entered blocking state [ 530.343205][T12431] bridge0: port 4(macsec0) entered forwarding state [ 530.351373][T12431] bridge0: port 3(team0) entered blocking state [ 530.358027][T12431] bridge0: port 3(team0) entered forwarding state [ 530.365442][T12431] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.373336][T12431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.381431][T12431] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.389516][T12431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.532142][T12431] device bridge0 entered promiscuous mode [ 530.555581][T12431] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 533.424868][T12472] device syzkaller0 entered promiscuous mode [ 533.431508][T12474] netlink: 'syz.4.3016': attribute type 39 has an invalid length. [ 533.560873][T12477] netlink: 'syz.2.3020': attribute type 10 has an invalid length. [ 534.099965][T12488] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3033'. [ 534.181737][T12495] netlink: 'syz.2.3035': attribute type 39 has an invalid length. [ 538.845886][T12540] device syzkaller0 entered promiscuous mode [ 540.249653][T12554] netlink: 'syz.4.3050': attribute type 6 has an invalid length. [ 540.259089][T12554] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3050'. [ 541.073936][T12570] device syzkaller0 entered promiscuous mode [ 543.898765][T12602] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.3067'. [ 543.921590][T12602] netlink: 'syz.3.3067': attribute type 21 has an invalid length. [ 543.930912][T12602] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3067'. [ 547.195973][T12653] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3086'. [ 547.308304][T12660] netlink: 'syz.2.3089': attribute type 10 has an invalid length. [ 550.126558][T12703] netlink: 'syz.4.3105': attribute type 10 has an invalid length. [ 551.771201][T12738] netlink: 'syz.2.3118': attribute type 10 has an invalid length. [ 553.276194][T12768] netlink: 'syz.2.3123': attribute type 29 has an invalid length. [ 553.304578][T12768] netlink: 'syz.2.3123': attribute type 29 has an invalid length. [ 553.314000][T12770] netlink: 'syz.2.3123': attribute type 29 has an invalid length. [ 553.440498][T12770] netlink: 'syz.2.3123': attribute type 29 has an invalid length. [ 553.905339][T12773] device batadv0 entered promiscuous mode [ 553.931491][T12779] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.3131'. [ 554.023990][T12779] netlink: 'syz.2.3131': attribute type 21 has an invalid length. [ 554.080440][T12779] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3131'. [ 555.140121][T12805] netlink: 'syz.3.3144': attribute type 29 has an invalid length. [ 555.181069][T12809] netlink: 'syz.0.3146': attribute type 39 has an invalid length. [ 555.292931][T12805] netlink: 'syz.3.3144': attribute type 29 has an invalid length. [ 555.333594][T12814] netlink: 'syz.3.3144': attribute type 29 has an invalid length. [ 555.375513][T12822] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.3148'. [ 555.394546][T12818] netlink: 'syz.3.3144': attribute type 29 has an invalid length. [ 555.436159][T12822] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3148'. [ 556.408353][T12846] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3158'. [ 556.693032][T12849] device batadv0 entered promiscuous mode [ 556.752695][T12851] bridge0: port 4(macsec0) entered disabled state [ 556.759852][T12851] bridge0: port 3(team0) entered disabled state [ 556.767250][T12851] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.775121][T12851] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.348111][T12872] device geneve1 entered promiscuous mode [ 557.359089][T12875] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3164'. [ 557.366159][T12872] team0: Port device geneve1 added [ 557.398068][T12875] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3164'. [ 557.819615][T12891] device batadv0 entered promiscuous mode [ 558.714095][T12911] validate_nla: 9 callbacks suppressed [ 558.714112][T12911] netlink: 'syz.0.3180': attribute type 29 has an invalid length. [ 558.728374][T12911] netlink: 'syz.0.3180': attribute type 29 has an invalid length. [ 558.767057][T12911] netlink: 'syz.0.3180': attribute type 29 has an invalid length. [ 558.836326][T12911] netlink: 'syz.0.3180': attribute type 29 has an invalid length. [ 559.030322][T12920] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3182'. [ 559.054320][T12920] netlink: 'syz.1.3182': attribute type 21 has an invalid length. [ 559.063191][T12920] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3182'. [ 559.251227][T12923] netlink: 'syz.4.3186': attribute type 10 has an invalid length. [ 560.017953][T12945] netlink: 'syz.1.3194': attribute type 29 has an invalid length. [ 560.026181][T12945] netlink: 'syz.1.3194': attribute type 29 has an invalid length. [ 560.036890][T12945] netlink: 'syz.1.3194': attribute type 29 has an invalid length. [ 560.088365][T12945] netlink: 'syz.1.3194': attribute type 29 has an invalid length. [ 560.840507][T12968] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.3201'. [ 560.898590][T12968] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3201'. [ 561.026294][T12974] device geneve1 entered promiscuous mode [ 561.052187][T12974] team0: Port device geneve1 added [ 562.537315][T13018] bridge0: port 4(macsec0) entered disabled state [ 562.574969][T13020] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.588008][T13020] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.597561][T13020] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.607856][T13020] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.658684][T13020] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.681901][T13020] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.707732][T13020] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.728032][T13020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.732774][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.743146][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.772035][T13020] device geneve1 entered promiscuous mode [ 562.788427][T13020] team0: Port device geneve1 added [ 562.820826][T13024] device batadv0 entered promiscuous mode [ 564.005195][T13054] validate_nla: 6 callbacks suppressed [ 564.005226][T13054] netlink: 'syz.2.3234': attribute type 39 has an invalid length. [ 564.887333][T13064] netlink: 'syz.3.3249': attribute type 29 has an invalid length. [ 564.913932][T13064] netlink: 'syz.3.3249': attribute type 29 has an invalid length. [ 564.941181][T13070] netlink: 'syz.0.3239': attribute type 10 has an invalid length. [ 564.960779][T13070] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.971323][T13070] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.981769][T13070] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.997253][T13070] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.069331][T13070] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.082134][T13070] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.091882][T13070] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.103383][T13070] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.119242][T13070] team0: Port device geneve1 added [ 565.127151][T13071] netlink: 'syz.3.3249': attribute type 29 has an invalid length. [ 565.170160][T13068] device syzkaller0 entered promiscuous mode [ 565.198397][T13073] device batadv0 entered promiscuous mode [ 565.269018][T13079] netlink: 'syz.3.3249': attribute type 29 has an invalid length. [ 565.297716][ T127] syzkaller0: tun_net_xmit 48 [ 567.465591][T13100] netlink: 'syz.2.3251': attribute type 2 has an invalid length. [ 567.510038][T13100] netlink: 'syz.2.3251': attribute type 2 has an invalid length. [ 569.123787][T13132] netlink: 'syz.1.3262': attribute type 29 has an invalid length. [ 569.162661][T13132] netlink: 'syz.1.3262': attribute type 29 has an invalid length. [ 569.190210][T13137] netlink: 'syz.1.3262': attribute type 29 has an invalid length. [ 569.294935][T13132] netlink: 'syz.1.3262': attribute type 29 has an invalid length. [ 569.400386][T13140] netlink: 'syz.0.3274': attribute type 10 has an invalid length. [ 569.821821][T13153] device syzkaller0 entered promiscuous mode [ 573.600256][T13244] device syzkaller0 entered promiscuous mode [ 574.111128][T13259] netlink: 'syz.4.3312': attribute type 9 has an invalid length. [ 574.529847][T13268] device syzkaller0 entered promiscuous mode [ 574.610922][T13270] netlink: 'syz.4.3316': attribute type 2 has an invalid length. [ 574.634458][T13272] netlink: 'syz.4.3316': attribute type 2 has an invalid length. [ 574.642795][ T1170] syzkaller0: tun_net_xmit 48 [ 577.142400][T13277] netlink: 'syz.1.3327': attribute type 2 has an invalid length. [ 577.151856][T13279] netlink: 'syz.1.3327': attribute type 2 has an invalid length. [ 577.163364][T13285] netlink: 'syz.3.3319': attribute type 15 has an invalid length. [ 577.171215][T13285] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.3319'. [ 577.662201][T13301] netlink: 'syz.0.3326': attribute type 9 has an invalid length. [ 577.717551][T13302] netlink: 'syz.3.3328': attribute type 10 has an invalid length. [ 577.892516][T13302] device wlan1 entered promiscuous mode [ 577.933092][T13302] team0: Port device wlan1 added [ 578.651597][T13312] device syzkaller0 entered promiscuous mode [ 581.894629][T13344] netlink: 'syz.1.3340': attribute type 9 has an invalid length. [ 582.200141][T13356] device syzkaller0 entered promiscuous mode [ 582.974456][T13384] netlink: 'syz.1.3354': attribute type 10 has an invalid length. [ 583.068251][T13384] device wlan1 entered promiscuous mode [ 583.106944][T13384] team0: Port device wlan1 added [ 583.757826][T13409] device syzkaller0 entered promiscuous mode [ 583.798776][T13413] bond0: (slave bridge0): Error: Slave device does not support XDP [ 583.868025][T13412] netlink: 'syz.1.3364': attribute type 10 has an invalid length. [ 583.952865][T13417] netlink: 'syz.4.3369': attribute type 10 has an invalid length. [ 584.030201][T13417] device wlan1 entered promiscuous mode [ 584.066418][T13417] team0: Port device wlan1 added [ 584.073897][T13421] netlink: 'syz.3.3371': attribute type 27 has an invalid length. [ 584.105230][T13421] netlink: 'syz.3.3371': attribute type 3 has an invalid length. [ 584.147520][T13421] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3371'. [ 584.574198][T13424] device syzkaller0 entered promiscuous mode [ 586.479969][T13460] netlink: 'syz.1.3384': attribute type 10 has an invalid length. [ 586.494035][T13458] device syzkaller0 entered promiscuous mode [ 587.171441][T13473] netlink: 'syz.0.3386': attribute type 10 has an invalid length. [ 587.244856][T13473] team0: Port device wlan1 added [ 588.061323][T13503] device syzkaller0 entered promiscuous mode [ 588.154115][T13502] device syzkaller0 entered promiscuous mode [ 591.360941][T13530] netlink: 'syz.2.3405': attribute type 10 has an invalid length. [ 591.379292][T13530] device wlan1 entered promiscuous mode [ 591.387467][T13530] team0: Port device wlan1 added [ 591.720153][T13541] device syzkaller0 entered promiscuous mode [ 592.103528][T13552] netlink: 'syz.0.3418': attribute type 15 has an invalid length. [ 592.130090][T13552] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.3418'. [ 592.240287][T13558] device syzkaller0 entered promiscuous mode [ 592.561528][T13563] netlink: 'syz.4.3434': attribute type 15 has an invalid length. [ 592.591034][T13563] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.3434'. [ 592.811306][T13572] device syzkaller0 entered promiscuous mode [ 596.531120][T13580] netlink: 'syz.4.3425': attribute type 10 has an invalid length. [ 596.763590][T13604] device syzkaller0 entered promiscuous mode [ 596.840358][T13610] netlink: 'syz.2.3438': attribute type 15 has an invalid length. [ 596.850516][T13610] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.3438'. [ 597.257762][T13623] device syzkaller0 entered promiscuous mode [ 597.498487][T13630] device syzkaller0 entered promiscuous mode [ 599.096541][T13636] netlink: 'syz.2.3449': attribute type 10 has an invalid length. [ 599.497054][T13651] device syzkaller0 entered promiscuous mode [ 602.585642][T13661] netlink: 'syz.1.3452': attribute type 15 has an invalid length. [ 602.598365][T13661] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.3452'. [ 602.608934][T13672] bond0: (slave bridge0): Error: Slave device does not support XDP [ 604.377690][T13711] device syzkaller0 entered promiscuous mode [ 604.442900][T13716] netlink: 'syz.3.3476': attribute type 15 has an invalid length. [ 604.482946][T13716] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.3476'. [ 604.951448][T13725] device syzkaller0 entered promiscuous mode [ 605.090997][T13731] bridge0: port 3(team0) entered disabled state [ 605.152368][T13731] device bridge_slave_0 left promiscuous mode [ 605.167384][T13731] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.633712][T13739] netlink: 'syz.0.3486': attribute type 10 has an invalid length. [ 608.669111][T13739] team0: Port device wlan1 removed [ 609.015834][T13754] netlink: 'syz.0.3493': attribute type 15 has an invalid length. [ 609.035727][T13754] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.3493'. [ 609.120282][T13756] device syzkaller0 entered promiscuous mode [ 609.461315][T13762] netlink: 'syz.0.3507': attribute type 15 has an invalid length. [ 609.475808][T13762] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.3507'. [ 610.108717][T13770] netlink: 'syz.4.3499': attribute type 8 has an invalid length. [ 610.133591][T13770] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3499'. [ 610.274246][T13772] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 610.393643][T13772] device syzkaller0 entered promiscuous mode [ 612.174546][T13775] device syzkaller0 entered promiscuous mode [ 612.578130][T13800] netlink: 'syz.1.3514': attribute type 8 has an invalid length. [ 612.587371][T13800] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3514'. [ 613.994973][T13789] netlink: 'syz.3.3511': attribute type 15 has an invalid length. [ 614.002814][T13789] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.3511'. [ 616.961293][T13830] device bridge_slave_0 left promiscuous mode [ 616.973099][T13830] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.064003][T13836] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 617.078301][T13836] device syzkaller0 entered promiscuous mode [ 618.827061][T13850] netlink: 'syz.1.3528': attribute type 15 has an invalid length. [ 618.836750][T13850] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.3528'. [ 618.979147][T13854] device syzkaller0 entered promiscuous mode [ 621.226919][T13870] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 621.245122][T13870] device syzkaller0 entered promiscuous mode [ 624.187643][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.194006][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.361597][T13903] device syzkaller0 entered promiscuous mode [ 624.710716][T13906] device syzkaller0 entered promiscuous mode [ 628.512056][T13921] bridge0: port 3(team0) entered disabled state [ 628.528245][T13921] device bridge_slave_0 left promiscuous mode [ 628.546127][T13921] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.008858][T13943] bridge0: port 3(team0) entered disabled state [ 630.013137][T13943] device bridge_slave_1 left promiscuous mode [ 630.031687][T13943] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.069177][T13943] device bridge_slave_0 left promiscuous mode [ 630.082237][T13943] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.144004][T13943] bond0: (slave bridge0): Releasing backup interface [ 630.282306][T13954] netlink: 'syz.1.3571': attribute type 10 has an invalid length. [ 631.190966][T13972] device syzkaller0 entered promiscuous mode [ 634.227359][T14001] netlink: 'syz.2.3577': attribute type 10 has an invalid length. [ 635.496859][T14029] device syzkaller0 entered promiscuous mode [ 636.362602][T14041] netlink: 'syz.2.3590': attribute type 8 has an invalid length. [ 636.372736][T14041] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3590'. [ 639.116332][T14083] netlink: 'syz.0.3605': attribute type 10 has an invalid length. [ 639.826731][T14096] device syzkaller0 entered promiscuous mode [ 643.232247][T14152] device syzkaller0 entered promiscuous mode [ 645.936851][T14188] netlink: 'syz.3.3643': attribute type 8 has an invalid length. [ 645.953915][T14188] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3643'. [ 646.228362][T14192] device syzkaller0 entered promiscuous mode [ 649.879966][T14233] device syzkaller0 entered promiscuous mode [ 649.898740][T14246] netlink: 'syz.1.3661': attribute type 21 has an invalid length. [ 649.919257][T14246] netlink: 'syz.1.3661': attribute type 6 has an invalid length. [ 649.932407][T14246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3661'. [ 653.674464][T14312] netlink: 'syz.2.3687': attribute type 10 has an invalid length. [ 657.605233][T14383] netlink: 'syz.2.3723': attribute type 21 has an invalid length. [ 657.623391][T14383] netlink: 'syz.2.3723': attribute type 6 has an invalid length. [ 657.631241][T14383] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3723'. [ 657.758280][T14390] netlink: 'syz.3.3718': attribute type 10 has an invalid length. [ 657.943843][T14392] netlink: 'syz.2.3719': attribute type 13 has an invalid length. [ 658.209676][T14406] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 658.244325][T14408] netlink: 'syz.4.3734': attribute type 10 has an invalid length. [ 658.263149][T14408] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.280364][T14408] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.292904][T14408] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.903694][T14429] netlink: 'syz.3.3732': attribute type 15 has an invalid length. [ 661.481381][T14457] netlink: 'syz.0.3743': attribute type 10 has an invalid length. [ 662.726074][T14477] netlink: 'syz.2.3750': attribute type 15 has an invalid length. [ 663.308239][T14492] netlink: 'syz.1.3759': attribute type 10 has an invalid length. [ 663.340215][T14492] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.380588][T14492] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.447810][T14492] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.477513][T14492] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.939411][T14509] netlink: 'syz.3.3766': attribute type 21 has an invalid length. [ 663.996002][T14512] netlink: 'syz.0.3764': attribute type 8 has an invalid length. [ 664.014679][T14512] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3764'. [ 664.222963][T14517] netlink: 'syz.4.3768': attribute type 15 has an invalid length. [ 664.941256][T14542] netlink: 'syz.2.3775': attribute type 10 has an invalid length. [ 665.237652][T14553] netlink: 'syz.3.3782': attribute type 8 has an invalid length. [ 665.262565][T14553] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3782'. [ 665.317708][T14558] netlink: 'syz.2.3784': attribute type 21 has an invalid length. [ 665.778493][T14571] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3798'. [ 666.304181][T14585] validate_nla: 2 callbacks suppressed [ 666.304225][T14585] netlink: 'syz.0.3795': attribute type 10 has an invalid length. [ 666.898391][T14605] netlink: 'syz.4.3801': attribute type 21 has an invalid length. [ 667.195452][T14607] netlink: 'syz.1.3800': attribute type 15 has an invalid length. [ 667.546919][T14625] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 670.271142][T14660] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 670.286680][T14660] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 670.296900][T14660] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 670.648184][T14673] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 671.455429][T14699] netlink: 'syz.3.3837': attribute type 29 has an invalid length. [ 671.469771][T14699] netlink: 'syz.3.3837': attribute type 29 has an invalid length. [ 673.722778][T14725] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 673.852491][T14734] netlink: 'syz.2.3851': attribute type 10 has an invalid length. [ 673.880307][T14734] team0: Device ipvlan1 failed to register rx_handler [ 674.670091][T14762] netlink: 'syz.1.3865': attribute type 29 has an invalid length. [ 674.679518][T14762] netlink: 'syz.1.3865': attribute type 29 has an invalid length. [ 675.893809][T14807] netlink: 'syz.2.3880': attribute type 29 has an invalid length. [ 677.334446][T14798] netlink: 'syz.1.3874': attribute type 10 has an invalid length. [ 677.342455][T14798] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3874'. [ 677.352042][T14798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 677.359643][T14798] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 677.377470][T14807] netlink: 'syz.2.3880': attribute type 29 has an invalid length. [ 678.860077][T14851] netlink: 'syz.1.3895': attribute type 21 has an invalid length. [ 679.186670][T14853] netlink: 'syz.0.3897': attribute type 29 has an invalid length. [ 679.260479][T14853] netlink: 'syz.0.3897': attribute type 29 has an invalid length. [ 680.280611][T14893] netlink: 'syz.0.3914': attribute type 21 has an invalid length. [ 681.475851][T14936] netlink: 'syz.4.3932': attribute type 21 has an invalid length. [ 682.372994][T14970] netlink: 'syz.0.3947': attribute type 21 has an invalid length. [ 683.585612][T15011] netlink: 'syz.1.3962': attribute type 21 has an invalid length. [ 683.964685][T15018] netlink: 'syz.4.3965': attribute type 10 has an invalid length. [ 683.999840][T15018] team0: Device ipvlan1 failed to register rx_handler [ 684.497818][T15037] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 685.042834][T15062] netlink: 'syz.1.3981': attribute type 10 has an invalid length. [ 685.071661][T15062] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 685.606740][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.613064][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.290219][T15107] netlink: 'syz.2.4001': attribute type 9 has an invalid length. [ 686.339457][T15107] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4001'. [ 686.512999][T15121] netlink: 'syz.2.4011': attribute type 21 has an invalid length. [ 686.642410][T15117] netlink: 67 bytes leftover after parsing attributes in process `syz.3.4009'. [ 687.739399][T15168] netlink: 'syz.3.4029': attribute type 10 has an invalid length. [ 687.806423][T15168] team0: Device ipvlan1 failed to register rx_handler [ 688.696221][T15203] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4047'. [ 689.038242][T15212] netlink: 'syz.4.4049': attribute type 9 has an invalid length. [ 689.073484][T15212] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4049'. [ 689.381900][T15227] netlink: 'syz.0.4057': attribute type 10 has an invalid length. [ 689.433841][T15227] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 689.592388][T15237] netlink: 'syz.1.4063': attribute type 10 has an invalid length. [ 689.622772][T15237] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 689.959967][T15252] netlink: 'syz.2.4078': attribute type 10 has an invalid length. [ 690.033091][T15252] team0: Device ipvlan1 failed to register rx_handler [ 690.096795][T15254] netlink: 'syz.0.4068': attribute type 9 has an invalid length. [ 690.142243][T15254] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4068'. [ 690.581362][T15271] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 690.602179][T15271] netlink: 'syz.4.4075': attribute type 10 has an invalid length. [ 690.624036][T15271] device wlan1 left promiscuous mode [ 690.632969][T15271] team0: Port device wlan1 removed [ 690.659931][T15271] device wlan1 entered promiscuous mode [ 690.673607][T15271] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 691.642389][T15289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4093'. [ 691.704298][T15290] netlink: 'syz.1.4084': attribute type 9 has an invalid length. [ 691.717257][T15290] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4084'. [ 691.765672][T15295] netlink: 'syz.0.4083': attribute type 10 has an invalid length. [ 691.781162][T15295] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 692.717317][T15322] netlink: 'syz.3.4092': attribute type 10 has an invalid length. [ 692.828202][T15322] team0: Device ipvlan1 failed to register rx_handler [ 693.413687][T15335] netlink: 'syz.4.4101': attribute type 10 has an invalid length. [ 693.480048][T15335] team0: Device ipvlan1 failed to register rx_handler [ 693.529447][T15337] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4100'. [ 693.631493][T15342] netlink: 67 bytes leftover after parsing attributes in process `syz.2.4105'. [ 694.065646][T15352] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.4109'. [ 694.085848][T15352] netlink: zone id is out of range [ 694.091271][T15352] netlink: zone id is out of range [ 694.133632][T15352] netlink: zone id is out of range [ 694.147880][T15360] netlink: 'syz.2.4111': attribute type 10 has an invalid length. [ 694.165411][T15352] netlink: get zone limit has 8 unknown bytes [ 694.215732][T15360] team0: Device ipvlan1 failed to register rx_handler [ 694.800122][T15371] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 695.546671][T15387] netlink: 'syz.2.4122': attribute type 10 has an invalid length. [ 695.582734][T15387] team0: Device ipvlan1 failed to register rx_handler [ 695.624568][T15390] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4121'. [ 695.911028][T15402] netlink: 'syz.1.4128': attribute type 29 has an invalid length. [ 695.921259][T15402] netlink: 'syz.1.4128': attribute type 29 has an invalid length. [ 695.941730][T15402] netlink: 'syz.1.4128': attribute type 29 has an invalid length. [ 696.181613][T15412] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 697.978776][T15463] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 698.031309][T15463] netlink: 'syz.1.4155': attribute type 10 has an invalid length. [ 698.119222][T15463] device wlan1 left promiscuous mode [ 698.128023][T15463] team0: Port device wlan1 removed [ 698.150617][T15467] netlink: 'syz.3.4157': attribute type 10 has an invalid length. [ 698.199427][T15467] team0: Device ipvlan1 failed to register rx_handler [ 699.122953][T15491] netlink: 'syz.3.4167': attribute type 10 has an invalid length. [ 699.173937][T15491] team0: Device ipvlan1 failed to register rx_handler [ 699.441059][T15507] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 699.556560][T15507] netlink: 'syz.0.4172': attribute type 10 has an invalid length. [ 699.639843][T15510] netlink: 'syz.4.4173': attribute type 10 has an invalid length. [ 699.701038][T15510] team0: Device ipvlan1 failed to register rx_handler [ 699.995133][T15520] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 700.246751][T15529] netlink: 'syz.0.4181': attribute type 10 has an invalid length. [ 700.292766][T15529] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 701.361151][T15576] netlink: 'syz.1.4199': attribute type 10 has an invalid length. [ 701.370302][T15576] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 701.440285][T15582] netlink: 'syz.4.4197': attribute type 10 has an invalid length. [ 701.462440][T15582] team0: Device ipvlan1 failed to register rx_handler [ 701.682978][T15586] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.4211'. [ 701.840414][T15596] netlink: 'syz.0.4205': attribute type 29 has an invalid length. [ 701.864459][T15596] netlink: 'syz.0.4205': attribute type 29 has an invalid length. [ 701.882124][T15598] netlink: 'syz.0.4205': attribute type 29 has an invalid length. [ 702.370291][T15611] netlink: 67 bytes leftover after parsing attributes in process `syz.1.4209'. [ 702.783992][T15633] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4219'. [ 703.100739][T15644] netlink: 'syz.2.4223': attribute type 29 has an invalid length. [ 703.771035][T15656] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4229'. [ 703.806500][T15656] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 703.819790][T15656] CPU: 1 PID: 15656 Comm: syz.3.4229 Not tainted 6.1.142-syzkaller #0 [ 703.828290][T15656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 703.839323][T15656] Call Trace: [ 703.842886][T15656] [ 703.846096][T15656] dump_stack_lvl+0x168/0x22e [ 703.851612][T15656] ? show_regs_print_info+0x12/0x12 [ 703.857200][T15656] ? load_image+0x3b0/0x3b0 [ 703.863064][T15656] sysfs_warn_dup+0x8a/0xa0 [ 703.867807][T15656] sysfs_do_create_link_sd+0xc0/0x110 [ 703.876047][T15656] device_add+0x7ed/0xfb0 [ 703.881036][T15656] wiphy_register+0x1e68/0x2bd0 [ 703.887192][T15656] ? cfg80211_event_work+0x40/0x40 [ 703.895277][T15656] ? minstrel_ht_alloc+0x894/0xa20 [ 703.901758][T15656] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 703.910929][T15656] ieee80211_register_hw+0x2c29/0x38c0 [ 703.917370][T15656] ? ieee80211_register_hw+0xef1/0x38c0 [ 703.923227][T15656] ? ieee80211_register_hw+0xef1/0x38c0 [ 703.928850][T15656] ? ieee80211_tasklet_handler+0x20/0x20 [ 703.935148][T15656] ? memset+0x1e/0x40 [ 703.939715][T15656] ? __hrtimer_init+0x186/0x270 [ 703.947231][T15656] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 703.954253][T15656] hwsim_new_radio_nl+0xafa/0xce0 [ 703.959613][T15656] genl_family_rcv_msg_doit+0x22e/0x320 [ 703.966147][T15656] ? end_current_label_crit_section+0x170/0x170 [ 703.973755][T15656] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 703.981605][T15656] ? bpf_lsm_capable+0x5/0x10 [ 703.987124][T15656] ? security_capable+0x85/0xb0 [ 703.993585][T15656] genl_rcv_msg+0x5f2/0x780 [ 703.998167][T15656] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 704.006225][T15656] ? genl_bind+0x350/0x350 [ 704.011395][T15656] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 704.018751][T15656] ? netlink_rcv_skb+0x80/0x420 [ 704.025389][T15656] ? genl_bind+0x350/0x350 [ 704.030112][T15656] netlink_rcv_skb+0x1de/0x420 [ 704.035733][T15656] ? genl_bind+0x350/0x350 [ 704.040460][T15656] ? netlink_ack+0x1100/0x1100 [ 704.045812][T15656] ? down_read+0x1a8/0x2d0 [ 704.051545][T15656] genl_rcv+0x24/0x40 [ 704.055665][T15656] netlink_unicast+0x74c/0x8c0 [ 704.060939][T15656] netlink_sendmsg+0x89e/0xbc0 [ 704.066294][T15656] ? netlink_getsockopt+0x540/0x540 [ 704.071934][T15656] ? aa_sock_msg_perm+0x94/0x150 [ 704.078650][T15656] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 704.084553][T15656] ? security_socket_sendmsg+0x7c/0xa0 [ 704.090146][T15656] ? netlink_getsockopt+0x540/0x540 [ 704.097123][T15656] ____sys_sendmsg+0x59b/0x970 [ 704.102318][T15656] ? __sys_sendmsg_sock+0x30/0x30 [ 704.107477][T15656] ? __import_iovec+0x315/0x500 [ 704.112902][T15656] ? import_iovec+0x6f/0xa0 [ 704.117623][T15656] ___sys_sendmsg+0x21c/0x290 [ 704.122893][T15656] ? __sys_sendmsg+0x270/0x270 [ 704.128040][T15656] ? __fdget+0x17c/0x200 [ 704.132581][T15656] __se_sys_sendmsg+0x19e/0x270 [ 704.138112][T15656] ? __x64_sys_sendmsg+0x80/0x80 [ 704.144120][T15656] ? syscall_enter_from_user_mode+0x2a/0x80 [ 704.150577][T15656] do_syscall_64+0x4c/0xa0 [ 704.156746][T15656] ? clear_bhb_loop+0x60/0xb0 [ 704.161767][T15656] ? clear_bhb_loop+0x60/0xb0 [ 704.167404][T15656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.174661][T15656] RIP: 0033:0x7f736378e929 [ 704.179577][T15656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.203516][T15656] RSP: 002b:00007f73635ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.212917][T15656] RAX: ffffffffffffffda RBX: 00007f73639b5fa0 RCX: 00007f736378e929 [ 704.221703][T15656] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 704.233568][T15656] RBP: 00007f7363810b39 R08: 0000000000000000 R09: 0000000000000000 [ 704.242544][T15656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.250890][T15656] R13: 0000000000000000 R14: 00007f73639b5fa0 R15: 00007ffc5fdb16c8 [ 704.259425][T15656] [ 704.291031][T15664] netlink: 67 bytes leftover after parsing attributes in process `syz.4.4232'. [ 704.713856][T15679] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 706.640830][T15748] validate_nla: 2 callbacks suppressed [ 706.640867][T15748] netlink: 'syz.4.4262': attribute type 29 has an invalid length. [ 706.698830][T15748] netlink: 'syz.4.4262': attribute type 29 has an invalid length. [ 706.740623][T15749] netlink: 'syz.4.4262': attribute type 29 has an invalid length. [ 707.796412][T15782] netlink: 'syz.0.4277': attribute type 9 has an invalid length. [ 707.832232][T15782] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4277'. [ 708.097790][T15790] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4283'. [ 708.116523][T15790] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 708.708760][T15819] netlink: 'syz.0.4295': attribute type 9 has an invalid length. [ 708.725028][T15819] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4295'. [ 708.766342][T15823] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4297'. [ 708.778797][T15823] netlink: zone id is out of range [ 708.799639][T15823] netlink: del zone limit has 4 unknown bytes [ 709.711182][T15842] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4308'. [ 709.749001][T15842] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 710.161284][T15861] netlink: 'syz.1.4312': attribute type 9 has an invalid length. [ 710.192447][T15861] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4312'. [ 710.515578][T15878] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 710.595597][T15882] netlink: 'syz.3.4320': attribute type 29 has an invalid length. [ 710.599601][T15883] netlink: 'syz.0.4331': attribute type 9 has an invalid length. [ 710.622229][T15883] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4331'. [ 710.632282][T15882] netlink: 'syz.3.4320': attribute type 29 has an invalid length. [ 710.650860][T15882] netlink: 'syz.3.4320': attribute type 29 has an invalid length. [ 711.491956][T15906] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4329'. [ 711.507251][T15906] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 711.861754][T15924] netlink: 'syz.3.4341': attribute type 29 has an invalid length. [ 711.919494][T15924] netlink: 'syz.3.4341': attribute type 29 has an invalid length. [ 711.986371][T15930] netlink: 'syz.3.4341': attribute type 29 has an invalid length. [ 712.330803][T15945] netlink: 'syz.0.4347': attribute type 9 has an invalid length. [ 712.356102][T15945] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4347'. [ 713.157733][T15969] netlink: 'syz.2.4359': attribute type 29 has an invalid length. [ 713.519323][T15969] netlink: 'syz.2.4359': attribute type 29 has an invalid length. [ 713.532231][T15972] netlink: 'syz.3.4357': attribute type 21 has an invalid length. [ 713.552529][T15972] netlink: 'syz.3.4357': attribute type 1 has an invalid length. [ 713.582036][T15971] netlink: 'syz.2.4359': attribute type 29 has an invalid length. [ 713.635636][T15975] netlink: 67 bytes leftover after parsing attributes in process `syz.0.4360'. [ 714.147707][T15999] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4369'. [ 714.189797][T15999] netlink: zone id is out of range [ 714.213923][T15999] netlink: del zone limit has 4 unknown bytes [ 714.392479][T16011] netlink: 'syz.2.4371': attribute type 9 has an invalid length. [ 714.405261][T16011] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4371'. [ 714.842628][T16030] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4383'. [ 714.869477][T16030] netlink: zone id is out of range [ 714.904394][T16030] netlink: del zone limit has 4 unknown bytes [ 715.914527][T16073] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4401'. [ 716.203587][T16081] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4403'. [ 716.223838][T16081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 716.232786][T16081] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 716.251782][T16081] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 716.791726][T16106] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4423'. [ 717.071264][T16116] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4418'. [ 717.090781][T16116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 717.119818][T16116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 717.133767][T16116] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 717.793203][T16145] validate_nla: 2 callbacks suppressed [ 717.812942][T16145] netlink: 'syz.1.4430': attribute type 9 has an invalid length. [ 717.822809][T16145] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4430'. [ 718.051655][T16158] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4435'. [ 718.086900][T16158] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 718.249766][T16164] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 718.269578][T16164] CPU: 1 PID: 16164 Comm: syz.4.4437 Not tainted 6.1.142-syzkaller #0 [ 718.278168][T16164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 718.288605][T16164] Call Trace: [ 718.292515][T16164] [ 718.295552][T16164] dump_stack_lvl+0x168/0x22e [ 718.300549][T16164] ? show_regs_print_info+0x12/0x12 [ 718.306312][T16164] ? load_image+0x3b0/0x3b0 [ 718.310865][T16164] sysfs_warn_dup+0x8a/0xa0 [ 718.315744][T16164] sysfs_do_create_link_sd+0xc0/0x110 [ 718.321206][T16164] device_add+0x7ed/0xfb0 [ 718.325575][T16164] wiphy_register+0x1e68/0x2bd0 [ 718.330451][T16164] ? cfg80211_event_work+0x40/0x40 [ 718.336358][T16164] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 718.342632][T16164] ? ieee80211_register_hw+0x2a6a/0x38c0 [ 718.348286][T16164] ieee80211_register_hw+0x2c29/0x38c0 [ 718.353788][T16164] ? ieee80211_register_hw+0xef1/0x38c0 [ 718.359349][T16164] ? ieee80211_register_hw+0xef1/0x38c0 [ 718.365521][T16164] ? ieee80211_tasklet_handler+0x20/0x20 [ 718.371170][T16164] ? memset+0x1e/0x40 [ 718.375156][T16164] ? __hrtimer_init+0x186/0x270 [ 718.380011][T16164] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 718.385872][T16164] hwsim_new_radio_nl+0xafa/0xce0 [ 718.391444][T16164] genl_family_rcv_msg_doit+0x22e/0x320 [ 718.397099][T16164] ? rcu_is_watching+0x11/0xa0 [ 718.402053][T16164] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 718.408133][T16164] ? lockdep_hardirqs_on+0x94/0x140 [ 718.413367][T16164] ? genl_rcv_msg+0x5ca/0x780 [ 718.418074][T16164] genl_rcv_msg+0x5f2/0x780 [ 718.422798][T16164] ? genl_bind+0x350/0x350 [ 718.427321][T16164] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 718.433861][T16164] netlink_rcv_skb+0x1de/0x420 [ 718.438661][T16164] ? genl_bind+0x350/0x350 [ 718.443698][T16164] ? netlink_ack+0x1100/0x1100 [ 718.448649][T16164] ? down_read+0x1a8/0x2d0 [ 718.454081][T16164] genl_rcv+0x24/0x40 [ 718.458096][T16164] netlink_unicast+0x74c/0x8c0 [ 718.463313][T16164] netlink_sendmsg+0x89e/0xbc0 [ 718.468104][T16164] ? netlink_getsockopt+0x540/0x540 [ 718.474373][T16164] ? aa_sock_msg_perm+0x94/0x150 [ 718.479871][T16164] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 718.485267][T16164] ? security_socket_sendmsg+0x7c/0xa0 [ 718.490908][T16164] ? netlink_getsockopt+0x540/0x540 [ 718.497227][T16164] ____sys_sendmsg+0x59b/0x970 [ 718.502199][T16164] ? __sys_sendmsg_sock+0x30/0x30 [ 718.510616][T16164] ? __import_iovec+0x315/0x500 [ 718.515654][T16164] ? import_iovec+0x6f/0xa0 [ 718.520343][T16164] ___sys_sendmsg+0x21c/0x290 [ 718.525041][T16164] ? __sys_sendmsg+0x270/0x270 [ 718.529847][T16164] ? ktime_get_real_ts64+0x420/0x420 [ 718.535266][T16164] ? __fdget+0x17c/0x200 [ 718.539531][T16164] __se_sys_sendmsg+0x19e/0x270 [ 718.544482][T16164] ? perf_trace_preemptirq_template+0x287/0x330 [ 718.551002][T16164] ? __x64_sys_sendmsg+0x80/0x80 [ 718.555958][T16164] ? lockdep_hardirqs_on+0x94/0x140 [ 718.561325][T16164] do_syscall_64+0x4c/0xa0 [ 718.565832][T16164] ? clear_bhb_loop+0x60/0xb0 [ 718.570689][T16164] ? clear_bhb_loop+0x60/0xb0 [ 718.575385][T16164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 718.581644][T16164] RIP: 0033:0x7ff9c098e929 [ 718.586145][T16164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.606129][T16164] RSP: 002b:00007ff9c1808038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.614637][T16164] RAX: ffffffffffffffda RBX: 00007ff9c0bb5fa0 RCX: 00007ff9c098e929 [ 718.622620][T16164] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 718.630592][T16164] RBP: 00007ff9c0a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 718.638913][T16164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.646884][T16164] R13: 0000000000000000 R14: 00007ff9c0bb5fa0 R15: 00007fff391709e8 [ 718.654957][T16164] [ 719.101610][T16178] __nla_validate_parse: 1 callbacks suppressed [ 719.101649][T16178] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4453'. [ 719.116561][T16182] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4454'. [ 719.129513][T16178] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 719.137706][T16178] CPU: 1 PID: 16178 Comm: syz.1.4453 Not tainted 6.1.142-syzkaller #0 [ 719.145887][T16178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 719.156056][T16178] Call Trace: [ 719.159355][T16178] [ 719.162301][T16178] dump_stack_lvl+0x168/0x22e [ 719.167010][T16178] ? show_regs_print_info+0x12/0x12 [ 719.172211][T16178] ? load_image+0x3b0/0x3b0 [ 719.176723][T16178] sysfs_warn_dup+0x8a/0xa0 [ 719.181228][T16178] sysfs_do_create_link_sd+0xc0/0x110 [ 719.186602][T16178] device_add+0x7ed/0xfb0 [ 719.190938][T16178] wiphy_register+0x1e68/0x2bd0 [ 719.195805][T16178] ? cfg80211_event_work+0x40/0x40 [ 719.201105][T16178] ? minstrel_ht_alloc+0x894/0xa20 [ 719.206851][T16178] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 719.212948][T16178] ieee80211_register_hw+0x2c29/0x38c0 [ 719.218431][T16178] ? ieee80211_register_hw+0xef1/0x38c0 [ 719.223974][T16178] ? ieee80211_register_hw+0xef1/0x38c0 [ 719.229537][T16178] ? ieee80211_tasklet_handler+0x20/0x20 [ 719.235184][T16178] ? memset+0x1e/0x40 [ 719.239175][T16178] ? __hrtimer_init+0x186/0x270 [ 719.244025][T16178] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 719.249761][T16178] hwsim_new_radio_nl+0xafa/0xce0 [ 719.254808][T16178] genl_family_rcv_msg_doit+0x22e/0x320 [ 719.260360][T16178] ? end_current_label_crit_section+0x170/0x170 [ 719.266687][T16178] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 719.272938][T16178] ? bpf_lsm_capable+0x5/0x10 [ 719.277977][T16178] ? security_capable+0x85/0xb0 [ 719.283443][T16178] genl_rcv_msg+0x5f2/0x780 [ 719.287963][T16178] ? genl_bind+0x350/0x350 [ 719.292382][T16178] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 719.298725][T16178] netlink_rcv_skb+0x1de/0x420 [ 719.303505][T16178] ? genl_bind+0x350/0x350 [ 719.307924][T16178] ? netlink_ack+0x1100/0x1100 [ 719.312699][T16178] ? down_read+0x1a8/0x2d0 [ 719.317205][T16178] genl_rcv+0x24/0x40 [ 719.321194][T16178] netlink_unicast+0x74c/0x8c0 [ 719.326001][T16178] netlink_sendmsg+0x89e/0xbc0 [ 719.330857][T16178] ? netlink_getsockopt+0x540/0x540 [ 719.336067][T16178] ? aa_sock_msg_perm+0x94/0x150 [ 719.341006][T16178] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 719.346285][T16178] ? security_socket_sendmsg+0x7c/0xa0 [ 719.351736][T16178] ? netlink_getsockopt+0x540/0x540 [ 719.356932][T16178] ____sys_sendmsg+0x59b/0x970 [ 719.361714][T16178] ? __sys_sendmsg_sock+0x30/0x30 [ 719.366914][T16178] ? __import_iovec+0x315/0x500 [ 719.371769][T16178] ? import_iovec+0x6f/0xa0 [ 719.376270][T16178] ___sys_sendmsg+0x21c/0x290 [ 719.380947][T16178] ? __sys_sendmsg+0x270/0x270 [ 719.385726][T16178] ? ktime_get_real_ts64+0x420/0x420 [ 719.391023][T16178] ? __fdget+0x17c/0x200 [ 719.395355][T16178] __se_sys_sendmsg+0x19e/0x270 [ 719.400204][T16178] ? perf_trace_preemptirq_template+0x287/0x330 [ 719.406452][T16178] ? __x64_sys_sendmsg+0x80/0x80 [ 719.411400][T16178] ? lockdep_hardirqs_on+0x94/0x140 [ 719.416602][T16178] do_syscall_64+0x4c/0xa0 [ 719.421015][T16178] ? clear_bhb_loop+0x60/0xb0 [ 719.425786][T16178] ? clear_bhb_loop+0x60/0xb0 [ 719.430457][T16178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.436344][T16178] RIP: 0033:0x7fb14a18e929 [ 719.440753][T16178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.460354][T16178] RSP: 002b:00007fb14b02d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.468773][T16178] RAX: ffffffffffffffda RBX: 00007fb14a3b5fa0 RCX: 00007fb14a18e929 [ 719.476825][T16178] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 719.484787][T16178] RBP: 00007fb14a210b39 R08: 0000000000000000 R09: 0000000000000000 [ 719.492844][T16178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.500810][T16178] R13: 0000000000000000 R14: 00007fb14a3b5fa0 R15: 00007fff6e5e2fc8 [ 719.508793][T16178] [ 719.521463][T16182] netlink: zone id is out of range [ 719.606581][T16182] netlink: del zone limit has 4 unknown bytes [ 719.794294][T16193] netlink: 'syz.4.4446': attribute type 9 has an invalid length. [ 719.820379][T16193] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4446'. [ 720.045730][T16208] IPv6: NLM_F_CREATE should be specified when creating new route [ 720.063180][T16208] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4457'. [ 720.573424][T16225] bridge0: port 5(bond0) entered blocking state [ 720.590497][T16225] bridge0: port 5(bond0) entered disabled state [ 720.616792][T16231] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4464'. [ 720.765845][T16236] netlink: 'syz.2.4467': attribute type 9 has an invalid length. [ 720.779669][T16236] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4467'. [ 720.944386][T16247] netlink: 'syz.4.4473': attribute type 9 has an invalid length. [ 721.703753][T16283] netlink: 'syz.0.4484': attribute type 9 has an invalid length. [ 721.711786][T16283] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4484'. [ 723.135135][T16332] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4511'. [ 723.361760][T16344] netlink: 'syz.3.4513': attribute type 9 has an invalid length. [ 723.375769][T16344] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.4513'. [ 723.569106][T16348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 723.576965][T16348] IPv6: NLM_F_CREATE should be set when creating new route [ 723.584790][T16348] IPv6: NLM_F_CREATE should be set when creating new route [ 723.612276][T16347] netlink: 'syz.1.4515': attribute type 9 has an invalid length. [ 724.278513][T16379] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4529'. [ 724.391697][T16382] netlink: 'syz.0.4532': attribute type 9 has an invalid length. [ 724.834482][T16398] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4539'. [ 724.870503][T16398] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 724.893481][T16398] CPU: 1 PID: 16398 Comm: syz.0.4539 Not tainted 6.1.142-syzkaller #0 [ 724.901960][T16398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 724.912227][T16398] Call Trace: [ 724.915519][T16398] [ 724.918475][T16398] dump_stack_lvl+0x168/0x22e [ 724.923275][T16398] ? show_regs_print_info+0x12/0x12 [ 724.928510][T16398] ? load_image+0x3b0/0x3b0 [ 724.933128][T16398] ? sysfs_warn_dup+0x61/0xa0 [ 724.937841][T16398] sysfs_warn_dup+0x8a/0xa0 [ 724.942376][T16398] sysfs_do_create_link_sd+0xc0/0x110 [ 724.948057][T16398] device_add+0x7ed/0xfb0 [ 724.952482][T16398] wiphy_register+0x1e68/0x2bd0 [ 724.957374][T16398] ? cfg80211_event_work+0x40/0x40 [ 724.962490][T16398] ? minstrel_ht_alloc+0x894/0xa20 [ 724.967614][T16398] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 724.973686][T16398] ieee80211_register_hw+0x2c29/0x38c0 [ 724.979536][T16398] ? ieee80211_register_hw+0xef1/0x38c0 [ 724.985077][T16398] ? ieee80211_register_hw+0xef1/0x38c0 [ 724.990624][T16398] ? ieee80211_tasklet_handler+0x20/0x20 [ 724.996268][T16398] ? memset+0x1e/0x40 [ 725.000252][T16398] ? __hrtimer_init+0x186/0x270 [ 725.005100][T16398] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 725.010919][T16398] hwsim_new_radio_nl+0xafa/0xce0 [ 725.015948][T16398] genl_family_rcv_msg_doit+0x22e/0x320 [ 725.021499][T16398] ? end_current_label_crit_section+0x170/0x170 [ 725.027742][T16398] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 725.034163][T16398] ? bpf_lsm_capable+0x5/0x10 [ 725.038841][T16398] ? security_capable+0x85/0xb0 [ 725.043737][T16398] genl_rcv_msg+0x5f2/0x780 [ 725.048249][T16398] ? genl_bind+0x350/0x350 [ 725.052671][T16398] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 725.059133][T16398] netlink_rcv_skb+0x1de/0x420 [ 725.064873][T16398] ? genl_bind+0x350/0x350 [ 725.069375][T16398] ? netlink_ack+0x1100/0x1100 [ 725.074162][T16398] ? down_read+0x1a8/0x2d0 [ 725.078584][T16398] genl_rcv+0x24/0x40 [ 725.082911][T16398] netlink_unicast+0x74c/0x8c0 [ 725.087681][T16398] netlink_sendmsg+0x89e/0xbc0 [ 725.092457][T16398] ? netlink_getsockopt+0x540/0x540 [ 725.097659][T16398] ? aa_sock_msg_perm+0x94/0x150 [ 725.103136][T16398] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 725.108691][T16398] ? security_socket_sendmsg+0x7c/0xa0 [ 725.114238][T16398] ? netlink_getsockopt+0x540/0x540 [ 725.119452][T16398] ____sys_sendmsg+0x59b/0x970 [ 725.124337][T16398] ? __sys_sendmsg_sock+0x30/0x30 [ 725.129360][T16398] ? __import_iovec+0x315/0x500 [ 725.134214][T16398] ? import_iovec+0x6f/0xa0 [ 725.139498][T16398] ___sys_sendmsg+0x21c/0x290 [ 725.144932][T16398] ? __sys_sendmsg+0x270/0x270 [ 725.149722][T16398] ? ktime_get_real_ts64+0x420/0x420 [ 725.155108][T16398] ? __fdget+0x17c/0x200 [ 725.159487][T16398] __se_sys_sendmsg+0x19e/0x270 [ 725.164333][T16398] ? perf_trace_preemptirq_template+0x287/0x330 [ 725.170573][T16398] ? __x64_sys_sendmsg+0x80/0x80 [ 725.175526][T16398] ? lockdep_hardirqs_on+0x94/0x140 [ 725.180735][T16398] do_syscall_64+0x4c/0xa0 [ 725.185242][T16398] ? clear_bhb_loop+0x60/0xb0 [ 725.189914][T16398] ? clear_bhb_loop+0x60/0xb0 [ 725.194944][T16398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 725.200832][T16398] RIP: 0033:0x7f901bb8e929 [ 725.205345][T16398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.225243][T16398] RSP: 002b:00007f901c9c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.233782][T16398] RAX: ffffffffffffffda RBX: 00007f901bdb5fa0 RCX: 00007f901bb8e929 [ 725.242356][T16398] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 725.251046][T16398] RBP: 00007f901bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 725.259052][T16398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.267025][T16398] R13: 0000000000000000 R14: 00007f901bdb5fa0 R15: 00007ffff1f156b8 [ 725.275101][T16398] [ 725.317431][T16403] netlink: 'syz.2.4542': attribute type 9 has an invalid length. [ 725.367195][T16403] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4542'. [ 725.512176][T16411] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4547'. [ 725.980177][T16429] netlink: 'syz.4.4553': attribute type 25 has an invalid length. [ 726.297769][T16445] netlink: 'syz.2.4559': attribute type 10 has an invalid length. [ 726.376366][T16445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 726.406490][T16445] device hsr0 entered promiscuous mode [ 726.415189][T16445] team0: Port device hsr0 added [ 726.565198][T16454] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4560'. [ 726.593013][T16452] netlink: 'syz.3.4561': attribute type 9 has an invalid length. [ 726.611410][T16452] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.4561'. [ 726.705214][T16458] IPv6: NLM_F_CREATE should be specified when creating new route [ 726.783628][T16458] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4564'. [ 727.258052][T16483] netlink: 'syz.3.4574': attribute type 10 has an invalid length. [ 727.388597][T16483] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 727.562402][T16489] netlink: 'syz.4.4579': attribute type 9 has an invalid length. [ 727.583587][T16489] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4579'. [ 727.610169][T16493] netlink: 'syz.3.4578': attribute type 9 has an invalid length. [ 727.660008][T16495] IPv6: NLM_F_CREATE should be specified when creating new route [ 727.697888][T16495] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4583'. [ 727.843993][T16499] bridge0: port 3(team0) entered disabled state [ 727.852157][T16499] device team0 left promiscuous mode [ 727.870704][T16499] device team_slave_0 left promiscuous mode [ 727.877564][T16499] device team_slave_1 left promiscuous mode [ 727.885035][T16499] device geneve1 left promiscuous mode [ 727.891084][T16499] device macvlan0 left promiscuous mode [ 727.906616][T16499] bridge0: port 3(team0) entered disabled state [ 728.001350][T16499] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.012155][T16499] device team_slave_0 entered promiscuous mode [ 728.019049][T16499] device team_slave_1 entered promiscuous mode [ 728.027196][T16499] bond0: (slave team0): Enslaving as an active interface with an up link [ 729.286324][T16530] validate_nla: 1 callbacks suppressed [ 729.286357][T16530] netlink: 'syz.4.4596': attribute type 10 has an invalid length. [ 729.359244][T16530] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 729.379693][T16533] netlink: 'syz.1.4597': attribute type 9 has an invalid length. [ 729.391395][T16533] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4597'. [ 729.408766][T16534] netlink: 'syz.2.4595': attribute type 9 has an invalid length. [ 729.702085][T16547] IPv6: NLM_F_CREATE should be specified when creating new route [ 729.722793][T16547] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4603'. [ 729.739669][T16549] netlink: 'syz.3.4605': attribute type 10 has an invalid length. [ 729.779101][T16549] device team0 left promiscuous mode [ 729.803524][T16549] device team_slave_0 left promiscuous mode [ 729.825791][T16549] device team_slave_1 left promiscuous mode [ 729.831897][T16549] device macvlan0 left promiscuous mode [ 729.858939][T16549] device geneve1 left promiscuous mode [ 729.865231][T16549] device wlan1 left promiscuous mode [ 729.903785][T16549] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.919870][T16549] device team_slave_0 entered promiscuous mode [ 729.926208][T16549] device team_slave_1 entered promiscuous mode [ 729.932612][T16549] device geneve1 entered promiscuous mode [ 729.939565][T16549] device wlan1 entered promiscuous mode [ 729.953993][T16549] bond0: (slave team0): Enslaving as an active interface with an up link [ 730.336543][T16566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 730.343956][T16566] IPv6: NLM_F_CREATE should be set when creating new route [ 730.351245][T16566] IPv6: NLM_F_CREATE should be set when creating new route [ 731.127207][T16588] netlink: 'syz.2.4623': attribute type 10 has an invalid length. [ 731.146452][T16588] device team0 left promiscuous mode [ 731.151810][T16588] device team_slave_0 left promiscuous mode [ 731.161772][T16588] device team_slave_1 left promiscuous mode [ 731.187318][T16588] device macvlan0 left promiscuous mode [ 731.194363][T16588] device geneve1 left promiscuous mode [ 731.200721][T16588] device wlan1 left promiscuous mode [ 731.206958][T16588] device hsr0 left promiscuous mode [ 731.567686][T16599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 731.575129][T16599] IPv6: NLM_F_CREATE should be set when creating new route [ 731.583211][T16599] IPv6: NLM_F_CREATE should be set when creating new route [ 732.254957][T16625] sock: sock_timestamping_bind_phc: sock not bind to device [ 732.300251][T16628] netlink: 'syz.2.4638': attribute type 9 has an invalid length. [ 732.311044][T16628] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4638'. [ 732.586829][T16634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 732.594797][T16634] IPv6: NLM_F_CREATE should be set when creating new route [ 732.602210][T16634] IPv6: NLM_F_CREATE should be set when creating new route [ 732.619554][T16636] netlink: 'syz.0.4652': attribute type 9 has an invalid length. [ 732.655451][T16636] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4652'. [ 732.751074][T16641] IPv6: NLM_F_CREATE should be specified when creating new route [ 732.759689][T16641] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4645'. [ 733.691189][T16665] sock: sock_timestamping_bind_phc: sock not bind to device [ 733.871718][T16667] netlink: 'syz.3.4658': attribute type 9 has an invalid length. [ 733.899384][T16667] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.4658'. [ 733.962892][T16669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 733.970759][T16669] IPv6: NLM_F_CREATE should be set when creating new route [ 733.979177][T16669] IPv6: NLM_F_CREATE should be set when creating new route [ 734.110071][T16672] netlink: 'syz.2.4669': attribute type 9 has an invalid length. [ 734.123483][T16672] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4669'. [ 734.178914][T16677] device wlan0 left promiscuous mode [ 734.216625][T16677] device wlan0 entered promiscuous mode [ 734.256702][T16679] netlink: 'syz.1.4662': attribute type 10 has an invalid length. [ 734.282076][T16679] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4662'. [ 734.329962][T16679] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 734.345499][T16679] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.377101][T16679] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 734.553054][T16691] netlink: 'syz.0.4677': attribute type 9 has an invalid length. [ 734.562551][T16691] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4677'. [ 734.588345][T16694] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4666'. [ 734.611808][T16694] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 734.624980][T16694] CPU: 0 PID: 16694 Comm: syz.2.4666 Not tainted 6.1.142-syzkaller #0 [ 734.633202][T16694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 734.643626][T16694] Call Trace: [ 734.646924][T16694] [ 734.651366][T16694] dump_stack_lvl+0x168/0x22e [ 734.656258][T16694] ? show_regs_print_info+0x12/0x12 [ 734.661523][T16694] ? load_image+0x3b0/0x3b0 [ 734.666519][T16694] sysfs_warn_dup+0x8a/0xa0 [ 734.672274][T16694] sysfs_do_create_link_sd+0xc0/0x110 [ 734.678470][T16694] device_add+0x7ed/0xfb0 [ 734.682846][T16694] wiphy_register+0x1e68/0x2bd0 [ 734.687770][T16694] ? cfg80211_event_work+0x40/0x40 [ 734.693017][T16694] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 734.699220][T16694] ieee80211_register_hw+0x2c29/0x38c0 [ 734.704914][T16694] ? ieee80211_register_hw+0xef1/0x38c0 [ 734.712618][T16694] ? ieee80211_register_hw+0xef1/0x38c0 [ 734.719740][T16694] ? ieee80211_tasklet_handler+0x20/0x20 [ 734.725436][T16694] ? memset+0x1e/0x40 [ 734.729454][T16694] ? __hrtimer_init+0x186/0x270 [ 734.734442][T16694] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 734.740223][T16694] hwsim_new_radio_nl+0xafa/0xce0 [ 734.745268][T16694] genl_family_rcv_msg_doit+0x22e/0x320 [ 734.751024][T16694] ? end_current_label_crit_section+0x170/0x170 [ 734.757304][T16694] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 734.763331][T16694] ? bpf_lsm_capable+0x5/0x10 [ 734.768022][T16694] ? security_capable+0x85/0xb0 [ 734.772884][T16694] genl_rcv_msg+0x5f2/0x780 [ 734.777430][T16694] ? genl_bind+0x350/0x350 [ 734.781957][T16694] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 734.788309][T16694] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 734.794399][T16694] netlink_rcv_skb+0x1de/0x420 [ 734.799172][T16694] ? genl_bind+0x350/0x350 [ 734.803599][T16694] ? netlink_ack+0x1100/0x1100 [ 734.808370][T16694] ? genl_bind+0x350/0x350 [ 734.812780][T16694] genl_rcv+0x24/0x40 [ 734.816764][T16694] netlink_unicast+0x74c/0x8c0 [ 734.821543][T16694] netlink_sendmsg+0x89e/0xbc0 [ 734.826401][T16694] ? netlink_getsockopt+0x540/0x540 [ 734.831682][T16694] ? aa_sock_msg_perm+0x94/0x150 [ 734.836698][T16694] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 734.841993][T16694] ? security_socket_sendmsg+0x7c/0xa0 [ 734.847478][T16694] ? netlink_getsockopt+0x540/0x540 [ 734.852726][T16694] ____sys_sendmsg+0x59b/0x970 [ 734.857648][T16694] ? __sys_sendmsg_sock+0x30/0x30 [ 734.862799][T16694] ? __import_iovec+0x315/0x500 [ 734.867784][T16694] ? import_iovec+0x6f/0xa0 [ 734.872335][T16694] ___sys_sendmsg+0x21c/0x290 [ 734.877099][T16694] ? __sys_sendmsg+0x270/0x270 [ 734.881941][T16694] ? __fdget+0x17c/0x200 [ 734.886233][T16694] __se_sys_sendmsg+0x19e/0x270 [ 734.891309][T16694] ? __x64_sys_sendmsg+0x80/0x80 [ 734.896490][T16694] ? syscall_enter_from_user_mode+0x2a/0x80 [ 734.902432][T16694] do_syscall_64+0x4c/0xa0 [ 734.907153][T16694] ? clear_bhb_loop+0x60/0xb0 [ 734.912206][T16694] ? clear_bhb_loop+0x60/0xb0 [ 734.916918][T16694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.922932][T16694] RIP: 0033:0x7f4d7d38e929 [ 734.927372][T16694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.947009][T16694] RSP: 002b:00007f4d7e144038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.955450][T16694] RAX: ffffffffffffffda RBX: 00007f4d7d5b5fa0 RCX: 00007f4d7d38e929 [ 734.964256][T16694] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 734.972835][T16694] RBP: 00007f4d7d410b39 R08: 0000000000000000 R09: 0000000000000000 [ 734.980908][T16694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.989078][T16694] R13: 0000000000000000 R14: 00007f4d7d5b5fa0 R15: 00007ffffb3a4c68 [ 734.997258][T16694] [ 735.120084][T16701] device syzkaller0 entered promiscuous mode [ 737.688643][T16711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 740.558082][T16733] netlink: 'syz.3.4682': attribute type 9 has an invalid length. [ 740.567337][T16733] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.4682'. [ 740.830027][T16760] netlink: 'syz.3.4694': attribute type 10 has an invalid length. [ 740.860873][T16760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4694'. [ 740.882606][T16760] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 740.900679][T16760] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.948734][T16760] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 741.632581][T16784] netlink: 'syz.1.4704': attribute type 9 has an invalid length. [ 741.648750][T16784] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4704'. [ 743.107658][T16804] netlink: 'syz.4.4713': attribute type 10 has an invalid length. [ 743.137060][T16804] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4713'. [ 743.186341][T16804] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 743.194785][T16804] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.228624][T16804] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 743.245970][T16810] netlink: 'syz.0.4711': attribute type 10 has an invalid length. [ 743.335875][T16810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 743.367585][T16810] team0: Port device hsr0 added [ 743.692689][T16822] netlink: 'syz.1.4719': attribute type 9 has an invalid length. [ 743.709432][T16822] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4719'. [ 743.983052][T16830] netlink: 'syz.3.4723': attribute type 39 has an invalid length. [ 745.786640][T16881] netlink: 'syz.1.4743': attribute type 10 has an invalid length. [ 745.868722][T16881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 745.887574][T16881] device hsr0 entered promiscuous mode [ 745.901183][T16881] team0: Port device hsr0 added [ 747.047082][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.056085][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.646526][T16930] netlink: 'syz.4.4766': attribute type 10 has an invalid length. [ 747.688506][T16930] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 747.932222][T16939] netlink: 'syz.3.4779': attribute type 10 has an invalid length. [ 747.964198][T16939] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 748.205378][T16946] netlink: 'syz.3.4781': attribute type 10 has an invalid length. [ 748.238274][T16946] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 748.280540][T16949] netlink: 'syz.0.4769': attribute type 10 has an invalid length. [ 748.299343][T16949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4769'. [ 748.317391][T16949] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 748.333141][T16949] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.368667][T16949] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 748.391229][T16944] netlink: 'syz.4.4771': attribute type 39 has an invalid length. [ 749.922280][T16998] netlink: 'syz.2.4793': attribute type 10 has an invalid length. [ 749.947894][T16998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4793'. [ 749.966832][T16998] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 749.989574][T16998] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.122803][T16998] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 753.104598][T17028] netlink: 'syz.2.4805': attribute type 39 has an invalid length. [ 753.142815][T17048] netlink: 'syz.1.4813': attribute type 10 has an invalid length. [ 753.154471][T17048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4813'. [ 754.159765][T17056] netlink: 'syz.2.4818': attribute type 10 has an invalid length. [ 754.181578][T17058] netlink: 'syz.1.4819': attribute type 39 has an invalid length. [ 755.098061][T17091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 755.105407][T17091] IPv6: NLM_F_CREATE should be set when creating new route [ 755.112704][T17091] IPv6: NLM_F_CREATE should be set when creating new route [ 755.120209][T17091] IPv6: NLM_F_CREATE should be set when creating new route [ 755.271983][T17098] netlink: 'syz.0.4835': attribute type 10 has an invalid length. [ 755.313807][T17098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4835'. [ 756.576099][T17134] netlink: 'syz.1.4850': attribute type 10 has an invalid length. [ 756.591069][T17134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4850'. [ 756.800566][T17139] netlink: 'syz.2.4855': attribute type 9 has an invalid length. [ 756.825605][T17139] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4855'. [ 756.918023][T17144] netlink: 'syz.1.4854': attribute type 39 has an invalid length. [ 758.044290][T17165] netlink: 'syz.2.4863': attribute type 39 has an invalid length. [ 758.254356][T17178] netlink: 'syz.3.4869': attribute type 9 has an invalid length. [ 758.262402][T17178] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.4869'. [ 758.442517][T17187] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4873'. [ 760.097179][T17215] netlink: 'syz.1.4884': attribute type 9 has an invalid length. [ 760.119436][T17215] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4884'. [ 761.239624][T17228] netlink: 'syz.4.4890': attribute type 39 has an invalid length. [ 761.851555][T17244] netlink: 'syz.2.4897': attribute type 9 has an invalid length. [ 761.877258][T17244] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4897'. [ 762.704949][T17265] netlink: 'syz.0.4906': attribute type 39 has an invalid length. [ 763.934147][T17283] netlink: 'syz.0.4914': attribute type 9 has an invalid length. [ 763.947833][T17283] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4914'. [ 764.715692][T17309] netlink: 'syz.3.4928': attribute type 9 has an invalid length. [ 764.783403][T17309] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.4928'. [ 766.051261][T17343] netlink: 'syz.2.4940': attribute type 9 has an invalid length. [ 766.060935][T17343] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4940'. [ 766.762030][T17364] netlink: 'syz.3.4945': attribute type 39 has an invalid length. [ 768.201177][T17388] ref_ctr_offset mismatch. inode: 0x1436 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 769.292751][T17413] netlink: 'syz.2.4971': attribute type 10 has an invalid length. [ 769.306243][T17413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4971'. [ 770.547743][T17428] netlink: 'syz.4.4977': attribute type 39 has an invalid length. [ 770.604778][T17430] netlink: 'syz.3.4978': attribute type 10 has an invalid length. [ 770.622074][T17430] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4978'. [ 770.761612][T17435] netlink: 'syz.1.4980': attribute type 9 has an invalid length. [ 770.774405][T17435] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4980'. [ 770.792288][T17438] netlink: 'syz.4.4983': attribute type 10 has an invalid length. [ 770.806954][T17438] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4983'. [ 772.805803][T17477] netlink: 'syz.1.4999': attribute type 10 has an invalid length. [ 772.832922][T17477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4999'. [ 772.852935][T17475] netlink: 'syz.4.4998': attribute type 9 has an invalid length. [ 772.862228][T17475] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4998'. [ 774.263997][T17513] netlink: 'syz.2.5013': attribute type 10 has an invalid length. [ 774.293567][T17513] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5013'. [ 774.435198][T17520] netlink: 'syz.0.5016': attribute type 9 has an invalid length. [ 774.445504][T17520] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5016'. [ 774.524001][T17525] netlink: 'syz.1.5021': attribute type 39 has an invalid length. [ 775.465528][T17548] ref_ctr_offset mismatch. inode: 0x1388 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 775.505899][T17551] netlink: 'syz.1.5031': attribute type 10 has an invalid length. [ 775.527780][T17551] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5031'. [ 776.517449][T17588] netlink: 'syz.2.5045': attribute type 10 has an invalid length. [ 776.526596][T17588] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5045'. [ 776.964287][T17596] netlink: 'syz.0.5047': attribute type 10 has an invalid length. [ 776.983876][T17596] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5047'. [ 778.076456][T17609] netlink: 'syz.2.5056': attribute type 9 has an invalid length. [ 778.092230][T17609] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5056'. [ 778.435625][T17629] netlink: 'syz.4.5062': attribute type 10 has an invalid length. [ 778.453474][T17629] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5062'. [ 779.033108][T17651] ref_ctr_offset mismatch. inode: 0x1519 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 779.482176][ T4280] Bluetooth: hci4: unexpected event 0x34 length: 15 > 6 [ 780.027930][T17681] netlink: 'syz.1.5084': attribute type 10 has an invalid length. [ 780.093966][T17681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5084'. [ 780.165092][T17685] ref_ctr_offset mismatch. inode: 0x144b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 780.208721][T17688] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5087'. [ 780.238573][T17688] device caif0 entered promiscuous mode [ 781.007676][T17718] netlink: 'syz.2.5098': attribute type 10 has an invalid length. [ 781.016717][T17718] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5098'. [ 781.237053][T17725] netlink: 'syz.2.5101': attribute type 10 has an invalid length. [ 781.248440][T17725] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5101'. [ 781.740158][T17725] team0: Port device macvlan0 removed [ 781.882584][T17732] netlink: 'syz.4.5104': attribute type 39 has an invalid length. [ 782.130136][ T4280] Bluetooth: hci3: unexpected event 0x34 length: 15 > 6 [ 782.227273][T17753] netlink: 'syz.0.5113': attribute type 9 has an invalid length. [ 782.254910][T17753] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5113'. [ 783.027918][T17774] netlink: 'syz.1.5121': attribute type 39 has an invalid length. [ 783.398292][T17776] ref_ctr_offset mismatch. inode: 0x157c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 783.538482][ T4280] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6 [ 783.759412][T17791] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5128'. [ 783.801543][T17791] device caif0 entered promiscuous mode [ 783.909303][T17799] netlink: 'syz.4.5131': attribute type 10 has an invalid length. [ 783.922847][T17799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5131'. [ 783.985818][T17803] netlink: 'syz.3.5134': attribute type 39 has an invalid length. [ 784.067553][T17806] netlink: 'syz.4.5135': attribute type 39 has an invalid length. [ 785.066136][T17836] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.5148'. [ 785.660325][T17864] device wlan0 left promiscuous mode [ 785.678808][T17864] mac80211_hwsim hwsim4 : renamed from wlan0 [ 786.580951][T17895] netlink: 'syz.1.5170': attribute type 10 has an invalid length. [ 786.592443][T17895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5170'. [ 786.848991][T17900] netlink: 'syz.3.5173': attribute type 39 has an invalid length. [ 787.376839][T17927] netlink: 'syz.4.5182': attribute type 10 has an invalid length. [ 787.389434][T17927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5182'. [ 787.772974][T17939] netlink: 'syz.1.5187': attribute type 39 has an invalid length. [ 788.316137][T17959] netlink: 'syz.1.5195': attribute type 10 has an invalid length. [ 788.353480][T17959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5195'. [ 788.817509][T17978] netlink: 'syz.2.5203': attribute type 39 has an invalid length. [ 789.371060][T18000] netlink: 'syz.4.5212': attribute type 10 has an invalid length. [ 789.381403][T18000] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5212'. [ 790.134056][T18013] netlink: 'syz.0.5215': attribute type 39 has an invalid length. [ 791.550335][T18058] netlink: 'syz.1.5232': attribute type 39 has an invalid length. [ 791.679480][T18065] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5234'. [ 791.720851][T18067] netlink: 'syz.3.5236': attribute type 10 has an invalid length. [ 791.734514][T18067] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5236'. [ 792.215766][T18067] team0: Port device macvlan0 removed [ 792.520082][T18080] device syzkaller0 entered promiscuous mode [ 795.213635][T18111] netlink: 'syz.2.5250': attribute type 9 has an invalid length. [ 795.221757][T18111] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5250'. [ 795.307590][T18117] device wlan0 left promiscuous mode [ 795.362013][T18117] mac80211_hwsim hwsim10 : renamed from wlan0 [ 795.562250][T18127] netlink: 'syz.4.5256': attribute type 10 has an invalid length. [ 795.592546][T18127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5256'. [ 795.726766][T18137] netlink: 'syz.4.5259': attribute type 10 has an invalid length. [ 795.735513][T18137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5259'. [ 795.886126][T18144] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.5262'. [ 795.986237][T18147] netlink: 'syz.4.5263': attribute type 9 has an invalid length. [ 795.994751][T18147] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.5263'. [ 796.713756][T18161] netlink: 'syz.4.5271': attribute type 10 has an invalid length. [ 796.743812][T18161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5271'. [ 796.776820][T18162] device wlan0 left promiscuous mode [ 796.812709][T18165] netlink: 'syz.1.5272': attribute type 10 has an invalid length. [ 796.835903][T18165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5272'. [ 796.857596][T18162] mac80211_hwsim hwsim5 : renamed from wlan0 [ 797.105727][T18176] netlink: 'syz.0.5276': attribute type 9 has an invalid length. [ 797.120504][T18176] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5276'. [ 797.141192][T18175] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.5275'. [ 797.357834][T18185] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5279'. [ 797.671942][T18198] netlink: 'syz.2.5285': attribute type 10 has an invalid length. [ 797.682582][T18198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5285'. [ 797.746833][T18201] netlink: 'syz.2.5286': attribute type 10 has an invalid length. [ 797.757400][T18201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5286'. [ 797.947323][T18205] netlink: 'syz.2.5289': attribute type 9 has an invalid length. [ 797.965573][T18205] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5289'. [ 798.289027][T18214] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.5291'. [ 798.505944][T18220] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5294'. [ 798.612306][T18229] netlink: 'syz.3.5297': attribute type 10 has an invalid length. [ 798.930619][T18242] netlink: 'syz.2.5303': attribute type 28 has an invalid length. [ 799.806953][T18246] netlink: 'syz.4.5316': attribute type 10 has an invalid length. [ 800.032796][T18246] team0: Port device macvlan0 removed [ 800.513521][T18273] netlink: 'syz.4.5312': attribute type 10 has an invalid length. [ 801.166914][T18295] netlink: 'syz.1.5321': attribute type 10 has an invalid length. [ 801.734841][T18295] device macvlan0 left promiscuous mode [ 801.761807][T18295] team0: Port device macvlan0 removed [ 801.847932][T18296] netlink: 'syz.4.5322': attribute type 28 has an invalid length. [ 801.856744][T18304] __nla_validate_parse: 6 callbacks suppressed [ 801.856756][T18304] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.5324'. [ 801.876557][T18308] netlink: 'syz.2.5328': attribute type 10 has an invalid length. [ 801.889859][T18308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5328'. [ 802.027357][T18314] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5331'. [ 802.152750][T18320] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5334'. [ 802.246133][T18324] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5335'. [ 803.329146][T18342] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.5341'. [ 803.392644][T18346] netlink: 'syz.2.5342': attribute type 10 has an invalid length. [ 803.409353][T18346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5342'. [ 803.591266][T18353] netlink: 'syz.1.5346': attribute type 28 has an invalid length. [ 803.742699][T18357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5350'. [ 803.984800][T18361] device syzkaller0 entered promiscuous mode [ 806.232622][T18386] netlink: 'syz.3.5358': attribute type 10 has an invalid length. [ 806.241079][T18386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5358'. [ 806.256711][T18388] netlink: 'syz.0.5355': attribute type 10 has an invalid length. [ 806.275480][T18388] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5355'. [ 806.590942][T18388] team0: Port device macvlan0 removed [ 808.243052][T18407] netlink: 'syz.1.5368': attribute type 9 has an invalid length. [ 808.264057][T18407] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.5368'. [ 808.387176][T18415] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5370'. [ 808.448938][T18419] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5371'. [ 808.476462][ T5360] tipc: Subscription rejected, illegal request [ 808.485370][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.491823][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.629645][T18426] netlink: 'syz.0.5374': attribute type 10 has an invalid length. [ 808.650684][T18426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5374'. [ 808.680652][T18428] netlink: 'syz.1.5376': attribute type 10 has an invalid length. [ 808.738351][T18428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5376'. [ 809.468877][T18448] netlink: 'syz.0.5387': attribute type 9 has an invalid length. [ 809.518350][T18448] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5387'. [ 809.621295][T18450] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.5389'. [ 809.837266][T18458] netlink: 'syz.0.5400': attribute type 9 has an invalid length. [ 809.873439][T18458] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5400'. [ 809.890543][T18454] netlink: 'syz.2.5391': attribute type 10 has an invalid length. [ 809.900930][T18454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5391'. [ 809.912659][T18461] netlink: 'syz.3.5393': attribute type 10 has an invalid length. [ 809.920979][T18461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5393'. [ 810.061597][ T4363] tipc: Subscription rejected, illegal request [ 811.193374][T18496] netlink: 'syz.3.5406': attribute type 9 has an invalid length. [ 811.345402][T18500] netlink: 'syz.1.5407': attribute type 10 has an invalid length. [ 811.472597][T18503] netlink: 'syz.3.5409': attribute type 10 has an invalid length. [ 811.946163][ T5394] tipc: Subscription rejected, illegal request [ 812.854992][T18550] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 813.442285][ T5360] tipc: Subscription rejected, illegal request [ 813.537735][T18560] __nla_validate_parse: 12 callbacks suppressed [ 813.537768][T18560] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5427'. [ 813.683919][T18564] validate_nla: 3 callbacks suppressed [ 813.683954][T18564] netlink: 'syz.4.5431': attribute type 9 has an invalid length. [ 813.773486][T18564] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.5431'. [ 813.791054][T18569] netlink: 'syz.3.5433': attribute type 10 has an invalid length. [ 813.809177][T18569] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5433'. [ 813.940795][T18574] netlink: 'syz.2.5435': attribute type 10 has an invalid length. [ 813.977932][T18574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5435'. [ 814.891546][T18608] netlink: 'syz.0.5448': attribute type 9 has an invalid length. [ 814.900342][T18608] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5448'. [ 815.004819][T18612] netlink: 'syz.3.5449': attribute type 10 has an invalid length. [ 815.036766][T18612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5449'. [ 815.178604][T18621] netlink: 'syz.0.5451': attribute type 10 has an invalid length. [ 815.192390][T18621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5451'. [ 815.811387][T18648] netlink: 'syz.1.5461': attribute type 9 has an invalid length. [ 815.826026][T18648] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.5461'. [ 815.921448][T18651] netlink: 'syz.1.5462': attribute type 10 has an invalid length. [ 815.933503][T18651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5462'. [ 816.236246][T18663] netlink: 'syz.4.5466': attribute type 10 has an invalid length. [ 816.251979][T18663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5466'. [ 816.949414][T18681] netlink: 'syz.4.5475': attribute type 10 has an invalid length. [ 817.891697][ T4363] tipc: Subscription rejected, illegal request [ 818.867780][T18738] validate_nla: 4 callbacks suppressed [ 818.867800][T18738] netlink: 'syz.2.5497': attribute type 10 has an invalid length. [ 818.973910][T18738] __nla_validate_parse: 6 callbacks suppressed [ 818.973929][T18738] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5497'. [ 819.297220][T18752] netlink: 'syz.2.5498': attribute type 1 has an invalid length. [ 819.354767][T18754] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5499'. [ 819.428751][ T4363] tipc: Subscription rejected, illegal request [ 819.611948][T18765] netlink: 'syz.2.5505': attribute type 10 has an invalid length. [ 819.634341][T18765] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5505'. [ 819.866329][T18775] netlink: 'syz.4.5510': attribute type 10 has an invalid length. [ 819.874649][T18775] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5510'. [ 820.118280][T18790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 820.125638][T18790] IPv6: NLM_F_CREATE should be set when creating new route [ 820.132918][T18790] IPv6: NLM_F_CREATE should be set when creating new route [ 820.140223][T18790] IPv6: NLM_F_CREATE should be set when creating new route [ 821.067895][ T4363] tipc: Subscription rejected, illegal request [ 821.071576][T18794] bridge0: port 4(macsec0) entered disabled state [ 821.080696][T18794] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.088039][T18794] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.222723][T18803] netlink: 'syz.3.5520': attribute type 10 has an invalid length. [ 821.230821][T18803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5520'. [ 821.533939][T18818] netlink: 'syz.4.5524': attribute type 10 has an invalid length. [ 821.552336][T18818] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5524'. [ 822.991087][T18833] netlink: 'syz.4.5533': attribute type 10 has an invalid length. [ 822.999163][T18833] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5533'. [ 823.895906][T18855] netlink: 'syz.1.5538': attribute type 10 has an invalid length. [ 823.953615][T18855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5538'. [ 824.518666][T18859] device syzkaller0 entered promiscuous mode [ 824.531283][T18862] netlink: 'syz.1.5542': attribute type 1 has an invalid length. [ 824.880891][T18874] netlink: 'syz.1.5546': attribute type 11 has an invalid length. [ 824.889595][T18874] netlink: 173820 bytes leftover after parsing attributes in process `syz.1.5546'. [ 824.905030][T18873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.018995][T18880] delete_channel: no stack [ 826.950453][T18892] netlink: 'syz.3.5552': attribute type 10 has an invalid length. [ 826.968648][T18892] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5552'. [ 827.152674][T18903] netlink: 'syz.3.5558': attribute type 10 has an invalid length. [ 827.172856][T18903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5558'. [ 828.136894][T18926] device syzkaller0 entered promiscuous mode [ 828.159941][T18934] netlink: 'syz.1.5569': attribute type 9 has an invalid length. [ 828.174665][T18934] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.5569'. [ 828.857678][ T4280] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11 [ 830.380705][T18956] netlink: 'syz.0.5580': attribute type 11 has an invalid length. [ 830.397552][T18956] netlink: 173820 bytes leftover after parsing attributes in process `syz.0.5580'. [ 830.421966][T18955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.673948][T18973] netlink: 'syz.3.5587': attribute type 9 has an invalid length. [ 830.708982][T18973] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.5587'. [ 831.627949][T18993] netlink: 'syz.4.5596': attribute type 10 has an invalid length. [ 831.650386][T18998] netlink: 'syz.1.5605': attribute type 9 has an invalid length. [ 831.683522][T18998] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.5605'. [ 831.933356][T18997] device syzkaller0 entered promiscuous mode [ 832.894648][ T4280] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 832.911474][ T4280] Bluetooth: hci2: Injecting HCI hardware error event [ 832.920161][ T4280] Bluetooth: hci2: hardware error 0x00 [ 834.450893][T19036] netlink: 'syz.0.5610': attribute type 10 has an invalid length. [ 834.647505][T19046] netlink: 'syz.1.5614': attribute type 10 has an invalid length. [ 834.657920][T19046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5614'. [ 834.967298][ T4280] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 836.912134][T19084] netlink: 'syz.1.5629': attribute type 10 has an invalid length. [ 836.929630][T19084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5629'. [ 838.027159][T19123] netlink: 'syz.3.5644': attribute type 10 has an invalid length. [ 838.045158][T19123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5644'. [ 839.447839][T19152] netlink: 'syz.4.5656': attribute type 10 has an invalid length. [ 839.456517][T19152] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5656'. [ 839.518124][T19156] netlink: 'syz.3.5657': attribute type 10 has an invalid length. [ 839.747849][T19162] device syzkaller0 entered promiscuous mode [ 840.371526][ T4280] Bluetooth: hci4: unexpected cc 0x1004 length: 12 > 11 [ 841.908360][T19171] netlink: 'syz.0.5672': attribute type 9 has an invalid length. [ 841.916237][T19171] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5672'. [ 842.126121][T19195] netlink: 'syz.0.5678': attribute type 9 has an invalid length. [ 842.143754][T19195] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5678'. [ 842.162727][T19189] netlink: 'syz.1.5669': attribute type 10 has an invalid length. [ 842.177375][T19189] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5669'. [ 842.375256][T19203] netlink: 'syz.1.5686': attribute type 10 has an invalid length. [ 842.389132][T19203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5686'. [ 842.393138][ T4280] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11 [ 843.164888][T19222] device syzkaller0 entered promiscuous mode [ 844.417099][ T4280] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 844.427145][ T4280] Bluetooth: hci4: Injecting HCI hardware error event [ 844.437603][ T4280] Bluetooth: hci4: hardware error 0x00 [ 845.313351][T19241] netlink: 'syz.0.5689': attribute type 10 has an invalid length. [ 845.321235][T19241] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5689'. [ 845.621496][T19256] netlink: 'syz.2.5694': attribute type 9 has an invalid length. [ 845.643739][T19256] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5694'. [ 845.973961][T19272] netlink: 'syz.3.5700': attribute type 10 has an invalid length. [ 845.982213][T19272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5700'. [ 846.484166][T19026] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 846.492814][T19026] Bluetooth: hci3: Injecting HCI hardware error event [ 846.501639][T19026] Bluetooth: hci3: hardware error 0x00 [ 846.563558][ T4280] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 846.725000][T19282] netlink: 'syz.2.5703': attribute type 10 has an invalid length. [ 846.811949][T19282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5703'. [ 846.885662][T19287] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 847.225766][T19295] device syzkaller0 entered promiscuous mode [ 848.574989][T19026] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 849.701310][T19320] device sit0 entered promiscuous mode [ 849.845864][T19327] netlink: 'syz.1.5720': attribute type 10 has an invalid length. [ 849.858618][T19327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5720'. [ 849.930107][T19325] netlink: 'syz.3.5719': attribute type 39 has an invalid length. [ 850.356624][T19349] bridge0: port 3(bond0) entered blocking state [ 850.363665][T19349] bridge0: port 3(bond0) entered disabled state [ 850.519005][T19353] netlink: 'syz.1.5731': attribute type 21 has an invalid length. [ 850.538239][T19353] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5731'. [ 850.564835][T19353] netlink: 'syz.1.5731': attribute type 5 has an invalid length. [ 850.599061][T19353] netlink: 'syz.1.5731': attribute type 6 has an invalid length. [ 850.625073][T19353] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5731'. [ 850.691180][T19361] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 851.004259][T19363] device syzkaller0 entered promiscuous mode [ 851.329896][T19381] sock: sock_timestamping_bind_phc: sock not bind to device [ 853.127447][T19376] netlink: 'syz.2.5738': attribute type 10 has an invalid length. [ 853.135646][T19376] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5738'. [ 853.499623][T19397] netlink: 'syz.1.5748': attribute type 10 has an invalid length. [ 853.528616][T19397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5748'. [ 853.868261][T19420] netlink: 'syz.4.5753': attribute type 9 has an invalid length. [ 853.876569][T19420] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.5753'. [ 854.101069][T19426] netlink: 'syz.3.5756': attribute type 2 has an invalid length. [ 854.109509][T19426] netlink: 'syz.3.5756': attribute type 8 has an invalid length. [ 854.117808][T19426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5756'. [ 854.779330][T19442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5761'. [ 855.455744][T19472] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5772'. [ 855.835538][T19484] validate_nla: 1 callbacks suppressed [ 855.835749][T19484] netlink: 'syz.1.5776': attribute type 10 has an invalid length. [ 855.856509][T19484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5776'. [ 856.708954][T19517] netlink: 'syz.0.5791': attribute type 10 has an invalid length. [ 856.720304][T19517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5791'. [ 856.780519][T19519] device sit0 entered promiscuous mode [ 856.985761][T19526] sock: sock_timestamping_bind_phc: sock not bind to device [ 857.206895][T19532] netlink: 'syz.2.5796': attribute type 2 has an invalid length. [ 857.222448][T19532] netlink: 'syz.2.5796': attribute type 8 has an invalid length. [ 857.231254][T19532] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5796'. [ 857.597043][T19550] netlink: 'syz.4.5802': attribute type 9 has an invalid length. [ 857.606071][T19550] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.5802'. [ 858.057029][T19570] netlink: 'syz.4.5811': attribute type 2 has an invalid length. [ 858.067318][T19570] netlink: 'syz.4.5811': attribute type 8 has an invalid length. [ 858.076117][T19570] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5811'. [ 858.601649][T19588] netlink: 'syz.1.5815': attribute type 21 has an invalid length. [ 858.636977][T19588] netlink: 'syz.1.5815': attribute type 1 has an invalid length. [ 858.754473][T19593] netlink: 'syz.3.5817': attribute type 9 has an invalid length. [ 858.762814][T19593] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.5817'. [ 860.182507][T19640] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.5832'. [ 860.462545][T19654] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5839'. [ 862.078781][T19699] validate_nla: 1 callbacks suppressed [ 862.078798][T19699] netlink: 'syz.4.5854': attribute type 9 has an invalid length. [ 862.092576][T19699] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.5854'. [ 862.257961][T19707] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5857'. [ 862.289477][T19707] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 862.296747][T19707] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 863.176554][T19728] device sit0 entered promiscuous mode [ 864.432436][T19754] netlink: 'syz.3.5875': attribute type 9 has an invalid length. [ 864.443373][T19754] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.5875'. [ 865.380442][T19787] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5885'. [ 865.754541][T19797] netlink: 'syz.2.5890': attribute type 29 has an invalid length. [ 865.783712][T19797] netlink: 'syz.2.5890': attribute type 29 has an invalid length. [ 865.823238][T19801] netlink: 'syz.2.5890': attribute type 29 has an invalid length. [ 866.825976][T19813] netlink: 'syz.3.5897': attribute type 9 has an invalid length. [ 866.850205][T19819] netlink: 'syz.4.5896': attribute type 9 has an invalid length. [ 866.858292][T19813] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5897'. [ 866.868532][T19819] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.5896'. [ 867.722743][T19848] netlink: 'syz.0.5915': attribute type 9 has an invalid length. [ 867.751135][T19848] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5915'. [ 867.803364][T19849] netlink: 766 bytes leftover after parsing attributes in process `syz.4.5905'. [ 868.229738][T19856] device sit0 entered promiscuous mode [ 868.988523][T19862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5910'. [ 869.089797][T19874] netlink: 'syz.0.5914': attribute type 10 has an invalid length. [ 869.102167][T19874] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5914'. [ 869.127267][T19874] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 869.576206][T19897] netlink: 'syz.0.5924': attribute type 9 has an invalid length. [ 869.584646][T19897] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5924'. [ 869.935216][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.941622][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.094813][T19900] netlink: 'syz.2.5935': attribute type 10 has an invalid length. [ 870.103063][T19900] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5935'. [ 870.129158][T19900] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 870.444058][T19906] device sit0 entered promiscuous mode [ 870.572880][T19917] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5928'. [ 871.012614][T19915] netlink: 'syz.0.5938': attribute type 9 has an invalid length. [ 871.023557][T19915] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5938'. [ 871.033593][T19917] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5928'. [ 871.070388][T19914] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5928'. [ 871.287678][T19930] netlink: 'syz.2.5934': attribute type 9 has an invalid length. [ 872.413369][T19973] device sit0 left promiscuous mode [ 872.744581][T19974] device sit0 entered promiscuous mode [ 873.073465][T19977] netlink: 'syz.2.5948': attribute type 9 has an invalid length. [ 873.081501][T19977] __nla_validate_parse: 2 callbacks suppressed [ 873.081513][T19977] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5948'. [ 873.283127][T19983] netlink: 'syz.0.5950': attribute type 9 has an invalid length. [ 873.355179][T19983] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5950'. [ 873.772201][T20001] netlink: 'syz.3.5958': attribute type 10 has an invalid length. [ 873.800489][T20005] netlink: 'syz.1.5960': attribute type 29 has an invalid length. [ 873.810188][T20001] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5958'. [ 873.833533][T20001] bond0: (slave team0): Releasing backup interface [ 873.843410][T20001] device team_slave_0 left promiscuous mode [ 873.849900][T20001] device team_slave_1 left promiscuous mode [ 873.856175][T20001] device geneve1 left promiscuous mode [ 873.861973][T20001] device wlan1 left promiscuous mode [ 873.888189][T20001] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 873.906901][T20005] netlink: 'syz.1.5960': attribute type 29 has an invalid length. [ 873.937698][T20006] netlink: 'syz.1.5960': attribute type 29 has an invalid length. [ 874.128517][T20021] netlink: 'syz.1.5965': attribute type 9 has an invalid length. [ 874.142474][T20021] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.5965'. [ 874.252144][T20025] device sit0 left promiscuous mode [ 874.359992][T20028] device sit0 entered promiscuous mode [ 876.279588][T20053] netlink: 'syz.1.5975': attribute type 10 has an invalid length. [ 876.308557][T20053] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5975'. [ 876.357715][T20053] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 876.480760][T20063] netlink: 'syz.4.5979': attribute type 9 has an invalid length. [ 876.502526][T20063] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.5979'. [ 877.406949][T20080] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5986'. [ 877.460589][T20080] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5986'. [ 877.508040][T20084] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5986'. [ 877.553364][T20086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5986'. [ 878.701071][T20106] netlink: 'syz.3.5993': attribute type 29 has an invalid length. [ 878.790707][T20106] netlink: 'syz.3.5993': attribute type 29 has an invalid length. [ 878.804118][T20112] netlink: 'syz.3.5993': attribute type 29 has an invalid length. [ 879.494648][T20132] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.6014'. [ 879.884771][T20141] netlink: 'syz.1.6003': attribute type 9 has an invalid length. [ 879.892567][T20141] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.6003'. [ 879.994386][T20149] netlink: 'syz.2.6002': attribute type 21 has an invalid length. [ 880.018775][T20149] netlink: 'syz.2.6002': attribute type 1 has an invalid length. [ 882.355678][T20200] netlink: 'syz.1.6025': attribute type 9 has an invalid length. [ 882.369659][T20200] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6025'. [ 882.386723][T20206] netlink: 'syz.0.6028': attribute type 9 has an invalid length. [ 882.397020][T20206] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.6028'. [ 882.854586][T20220] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6033'. [ 883.312414][T20231] netlink: 'syz.4.6037': attribute type 21 has an invalid length. [ 883.356340][T20231] netlink: 'syz.4.6037': attribute type 1 has an invalid length. [ 883.907154][T20259] device sit0 left promiscuous mode [ 884.019945][T20263] device sit0 entered promiscuous mode [ 884.590088][T20272] netlink: 'syz.3.6055': attribute type 39 has an invalid length. [ 884.603484][T20276] netlink: 'syz.2.6056': attribute type 9 has an invalid length. [ 884.632723][T20276] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.6056'. [ 884.734474][T20280] device wg2 entered promiscuous mode [ 884.965491][T20288] netlink: 'syz.0.6059': attribute type 21 has an invalid length. [ 885.012921][T20288] netlink: 'syz.0.6059': attribute type 1 has an invalid length. [ 885.875401][T20315] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6073'. [ 885.908696][T20318] device wg2 entered promiscuous mode [ 886.146661][T20331] netlink: 'syz.2.6078': attribute type 9 has an invalid length. [ 886.154946][T20331] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.6078'. [ 886.222080][T20335] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.6092'. [ 887.436284][T20363] device wg2 entered promiscuous mode [ 887.767719][T20384] netlink: 'syz.1.6103': attribute type 9 has an invalid length. [ 887.783308][T20384] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.6103'. [ 888.764586][T20399] device sit0 left promiscuous mode [ 888.834539][T20399] device sit0 entered promiscuous mode [ 889.534133][T20431] device wg2 entered promiscuous mode [ 889.590900][T20435] netlink: 'syz.4.6122': attribute type 9 has an invalid length. [ 889.611202][T20435] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.6122'. [ 889.858061][T20444] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 890.611829][T20448] netlink: 'syz.1.6139': attribute type 39 has an invalid length. [ 890.978544][T20467] netlink: 'syz.3.6138': attribute type 9 has an invalid length. [ 891.008899][T20467] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.6138'. [ 891.337786][T20486] netlink: 'syz.2.6146': attribute type 39 has an invalid length. [ 893.362126][T20515] netlink: 'syz.1.6156': attribute type 9 has an invalid length. [ 893.397119][T20515] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.6156'. [ 895.178028][T20562] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 896.701449][T20595] netlink: 'syz.3.6184': attribute type 9 has an invalid length. [ 896.709515][T20595] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.6184'. [ 896.982867][T20608] device wg2 entered promiscuous mode [ 898.037128][T20625] netlink: 'syz.3.6196': attribute type 9 has an invalid length. [ 898.046734][T20625] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.6196'. [ 898.167267][T20629] netlink: 'syz.1.6194': attribute type 10 has an invalid length. [ 898.259045][T20629] device wlan1 entered promiscuous mode [ 898.327555][T20629] team0: Port device wlan1 added [ 899.144401][T20659] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 899.152252][T20659] #PF: supervisor instruction fetch in kernel mode [ 899.158747][T20659] #PF: error_code(0x0010) - not-present page [ 899.164737][T20659] PGD 77d38067 P4D 77d38067 PUD 0 [ 899.169850][T20659] Oops: 0010 [#1] PREEMPT SMP KASAN [ 899.175036][T20659] CPU: 1 PID: 20659 Comm: syz.4.6208 Not tainted 6.1.142-syzkaller #0 [ 899.183175][T20659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 899.193311][T20659] RIP: 0010:0x0 [ 899.196797][T20659] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 899.204158][T20659] RSP: 0018:ffffc9000595f398 EFLAGS: 00010246 [ 899.210248][T20659] RAX: 1ffffffff162b2db RBX: 000000000000000f RCX: 0000000000000000 [ 899.218225][T20659] RDX: ffffc9000595f440 RSI: 0000000000000001 RDI: ffff8880745c0000 [ 899.226645][T20659] RBP: ffffc9000595f4b0 R08: dffffc0000000000 R09: ffffed100e8b8008 [ 899.234713][T20659] R10: ffffed100e8b8008 R11: 1ffff1100e8b8007 R12: ffffe8ffffd45bb0 [ 899.242683][T20659] R13: ffffffff8b1596d8 R14: 0000000000000000 R15: ffff8880745c0000 [ 899.250655][T20659] FS: 00007ff9c18086c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 899.259575][T20659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.266158][T20659] CR2: ffffffffffffffd6 CR3: 000000007f5fc000 CR4: 00000000003506e0 [ 899.274121][T20659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 899.282076][T20659] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 899.290032][T20659] Call Trace: [ 899.293310][T20659] [ 899.296229][T20659] bond_xdp_xmit+0x309/0x520 [ 899.300820][T20659] ? bond_xdp_xmit+0x93/0x520 [ 899.305493][T20659] ? bond_xdp+0x840/0x840 [ 899.309841][T20659] bq_xmit_all+0xc99/0x10d0 [ 899.314365][T20659] ? __next_zones_zonelist+0x99/0x120 [ 899.319745][T20659] ? rcu_is_watching+0x11/0xa0 [ 899.324510][T20659] ? __alloc_pages+0x287/0x4e0 [ 899.329263][T20659] ? __dev_flush+0x1b0/0x1b0 [ 899.333848][T20659] ? zone_statistics+0x170/0x170 [ 899.338776][T20659] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 899.344926][T20659] ? lockdep_hardirqs_on+0x94/0x140 [ 899.350123][T20659] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 899.356268][T20659] ? __alloc_pages_bulk+0x49a/0x920 [ 899.361464][T20659] ? rcu_is_watching+0x11/0xa0 [ 899.366221][T20659] bq_enqueue+0x337/0x3d0 [ 899.370544][T20659] dev_map_enqueue+0x1b4/0x340 [ 899.375326][T20659] xdp_do_redirect_frame+0x30c/0x650 [ 899.380605][T20659] bpf_test_run_xdp_live+0x9dd/0x1970 [ 899.385981][T20659] ? bpf_test_run_xdp_live+0x45c/0x1970 [ 899.391515][T20659] ? xdp_convert_md_to_buff+0x330/0x330 [ 899.397059][T20659] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 899.403469][T20659] ? bpf_test_init+0x134/0x150 [ 899.408232][T20659] ? xdp_convert_md_to_buff+0x5b/0x330 [ 899.413683][T20659] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 899.419052][T20659] ? dev_put+0x80/0x80 [ 899.423289][T20659] ? dev_put+0x80/0x80 [ 899.427347][T20659] bpf_prog_test_run+0x31e/0x390 [ 899.432452][T20659] __sys_bpf+0x593/0x6d0 [ 899.436690][T20659] ? bpf_link_show_fdinfo+0x310/0x310 [ 899.442061][T20659] ? lock_chain_count+0x20/0x20 [ 899.447187][T20659] __x64_sys_bpf+0x78/0x90 [ 899.451622][T20659] do_syscall_64+0x4c/0xa0 [ 899.456042][T20659] ? clear_bhb_loop+0x60/0xb0 [ 899.460712][T20659] ? clear_bhb_loop+0x60/0xb0 [ 899.465393][T20659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.471289][T20659] RIP: 0033:0x7ff9c098e929 [ 899.475712][T20659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.495408][T20659] RSP: 002b:00007ff9c1808038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 899.503905][T20659] RAX: ffffffffffffffda RBX: 00007ff9c0bb5fa0 RCX: 00007ff9c098e929 [ 899.511877][T20659] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 899.519839][T20659] RBP: 00007ff9c0a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 899.527796][T20659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.535754][T20659] R13: 0000000000000000 R14: 00007ff9c0bb5fa0 R15: 00007fff391709e8 [ 899.543732][T20659] [ 899.546745][T20659] Modules linked in: [ 899.550642][T20659] CR2: 0000000000000000 [ 899.554796][T20659] ---[ end trace 0000000000000000 ]--- [ 899.560234][T20659] RIP: 0010:0x0 [ 899.563689][T20659] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 899.571054][T20659] RSP: 0018:ffffc9000595f398 EFLAGS: 00010246 [ 899.581902][T20659] RAX: 1ffffffff162b2db RBX: 000000000000000f RCX: 0000000000000000 [ 899.589965][T20659] RDX: ffffc9000595f440 RSI: 0000000000000001 RDI: ffff8880745c0000 [ 899.598025][T20659] RBP: ffffc9000595f4b0 R08: dffffc0000000000 R09: ffffed100e8b8008 [ 899.606004][T20659] R10: ffffed100e8b8008 R11: 1ffff1100e8b8007 R12: ffffe8ffffd45bb0 [ 899.613966][T20659] R13: ffffffff8b1596d8 R14: 0000000000000000 R15: ffff8880745c0000 [ 899.622012][T20659] FS: 00007ff9c18086c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 899.631104][T20659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.638244][T20659] CR2: ffffffffffffffd6 CR3: 000000007f5fc000 CR4: 00000000003506e0 [ 899.646215][T20659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 899.654207][T20659] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 899.662273][T20659] Kernel panic - not syncing: Fatal exception in interrupt [ 899.669877][T20659] Kernel Offset: disabled [ 899.674202][T20659] Rebooting in 86400 seconds..